This looks to me like you're copying the contents of an ELF binary from userspace memory into a kernel keyring, and then immediately copying it back from the kernel keyring to userspace memory, followed by userland exec the usual way. What's the point of the keyring steps, rather than just doing userland exec alone?
mitxela 2 days ago [-]
An LLM must have told them it was honestly a genuinely unique idea.
matheuzsec_ 5 days ago [-]
The keyring separates staging from execution, payload can be written by a different process at a different time with no file, no memfd, no open fd in /proc/pid/fd, by the time the loader runs, the payload only exists in kernel memory, direct userland exec still needs to read from somewhere visible
josephcsible 3 days ago [-]
But then why mention execution at all, rather than just saying this is a place you can store arbitrary data?
tosti 2 days ago [-]
> So we load the ELF manually
Hold it right there. You mean if you've got a thread and a chunk of memory, you can use it? Who knew, except everyone?
westurner 5 days ago [-]
Can a process loaded this way be reverified once loaded?
mitxela 2 days ago [-]
What does reverified mean?
matheuzsec_ 5 days ago [-]
[dead]
Rendered at 15:58:22 GMT+0000 (Coordinated Universal Time) with Vercel.
Hold it right there. You mean if you've got a thread and a chunk of memory, you can use it? Who knew, except everyone?