From owner-freebsd-security@FreeBSD.ORG  Tue Sep 20 20:08:26 2011
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 175F6106567D;
	Tue, 20 Sep 2011 20:08:26 +0000 (UTC) (envelope-from mike@sentex.net)
Received: from smarthost1.sentex.ca (smarthost1-6.sentex.ca
	[IPv6:2607:f3e0:0:1::12])
	by mx1.freebsd.org (Postfix) with ESMTP id CB0108FC1B;
	Tue, 20 Sep 2011 20:08:25 +0000 (UTC)
Received: from [IPv6:2607:f3e0:0:4:f025:8813:7603:7e4a] (saphire3.sentex.ca
	[IPv6:2607:f3e0:0:4:f025:8813:7603:7e4a])
	by smarthost1.sentex.ca (8.14.4/8.14.4) with ESMTP id p8KK8NdX034514;
	Tue, 20 Sep 2011 16:08:23 -0400 (EDT) (envelope-from mike@sentex.net)
Message-ID: <4E78F2B1.90302@sentex.net>
Date: Tue, 20 Sep 2011 16:08:17 -0400
From: Mike Tancsa <mike@sentex.net>
Organization: Sentex Communications
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US;
	rv:1.9.2.13) Gecko/20101207 Thunderbird/3.1.7
MIME-Version: 1.0
To: Gary Palmer <gpalmer@freebsd.org>
References: <CAHQQXOObKpCU9syvv0tYfets9+sMKjYU0ONeQ23KGkOOnxJOaA@mail.gmail.com>
	<4E778357.1030206@sentex.net> <4E78E5DC.6050600@sentex.net>
	<20110920192100.GF10165@in-addr.com>
In-Reply-To: <20110920192100.GF10165@in-addr.com>
X-Enigmail-Version: 1.1.1
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
X-Scanned-By: MIMEDefang 2.71 on IPv6:2607:f3e0:0:1::12
Cc: Corey Smith <corsmith@gmail.com>, freebsd-security@freebsd.org
Subject: Re: pam_ssh_agent_auth coredump on AMD64 (was Re: PAM modules)
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Security issues \[members-only posting\]"
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 20 Sep 2011 20:08:26 -0000

On 9/20/2011 3:21 PM, Gary Palmer wrote:
> 
> If you do
> 
> sysctl kern.sugid_coredump=1
> 
> can you get a coredump?


Tried that too.

% sysctl -a | grep core
kern.corefile: %N.core
kern.nodump_coredump: 0
kern.coredump: 1
kern.sugid_coredump: 1
debug.elf64_legacy_coredump: 1
debug.elf32_legacy_coredump: 1

Actually, my mistake on i386. It seems the plugin works with

sudo-1.8.1_5

but not 1.8.2

Seems to die in the function policy_check in sudo.c


    return plugin->u.policy->check_policy(argc, argv, env_add, command_info,
        argv_out, user_env_out);
}




	---Mike
-- 
-------------------
Mike Tancsa, tel +1 519 651 3400
Sentex Communications, mike@sentex.net
Providing Internet services since 1994 www.sentex.net
Cambridge, Ontario Canada   http://www.tancsa.com/