Invoke binary from kernel space

Invoke binary from kernel space

[hemanth nandish]

[-- Attachment #1.1: Type: text/plain, Size: 1127 bytes --]

Hello,

I came across the function: call_usermodehelper
This can be used to invoke exec a binary from the kernel space.
It ultimately calls:
call_usermodehelper_exec_async

Which internally does:
retval = do_execve <https://elixir.bootlin.com/linux/v4.7/ident/do_execve>(
getname_kernel <https://elixir.bootlin.com/linux/v4.7/ident/getname_kernel>(
sub_info->path <https://elixir.bootlin.com/linux/v4.7/ident/path>),(const
char __user <https://elixir.bootlin.com/linux/v4.7/ident/__user> *const
__user <https://elixir.bootlin.com/linux/v4.7/ident/__user> *)sub_info->argv
<https://elixir.bootlin.com/linux/v4.7/ident/argv>,(const char __user
<https://elixir.bootlin.com/linux/v4.7/ident/__user> *const __user
<https://elixir.bootlin.com/linux/v4.7/ident/__user> *)sub_info->envp
<https://elixir.bootlin.com/linux/v4.7/ident/envp>);

This function works as expected and a new thread is spawned.
Now when I try to directly call do_execve within my module by passing the
required arguments, I am getting  -EFAULT error.
This is happening in this function:

count(argv, MAX_ARG_STRINGS)

What am I missing here?

Thank you
Hemanth

[-- Attachment #1.2: Type: text/html, Size: 7664 bytes --]

[-- Attachment #2: Type: text/plain, Size: 170 bytes --]

_______________________________________________
Kernelnewbies mailing list
Kernelnewbies@kernelnewbies.org
https://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies

Re: Invoke binary from kernel space

[Valdis Klētnieks]

[-- Attachment #1.1: Type: text/plain, Size: 427 bytes --]

On Fri, 24 Apr 2020 01:23:45 +0530, hemanth nandish said:

> This function works as expected and a new thread is spawned.
> Now when I try to directly call do_execve within my module by passing the
> required arguments, I am getting  -EFAULT error.
> This is happening in this function:
>
> count(argv, MAX_ARG_STRINGS)
>
> What am I missing here?

My first guess is "the NULL pointer that indicates the end of the argv list".

[-- Attachment #1.2: Type: application/pgp-signature, Size: 832 bytes --]

[-- Attachment #2: Type: text/plain, Size: 170 bytes --]

_______________________________________________
Kernelnewbies mailing list
Kernelnewbies@kernelnewbies.org
https://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies