📄 readme.locking
字号:
I have implemented portmap spoofing in klibc nfsmount (released asklibc-0.144) This is basically a vestigial portmap daemon which getslaunched before the mount() call and then just records anytransactions it gets to a file and sends back an affirmative reply.There are two ways to use it (this belongs in a README file, but it'stoo late at night right now):a) Set a fixed portnumber in /proc/sys/nfs/nlm_tcpport and/proc/sys/nfs/nlm_udpport before calling nfsmount; once the portmapperstarts feed that fixed portnumber to pmap_set(8). In this case thepmap_file can be /dev/null.b) Allow the kernel to bind to any port and use the file produced bynfsroot to feed to pmap_set (it should be directly compatible); thismeans the file needs to be transferred to a place where the "realroot" can find it before run-init.In either case, it is imperative that the real portmapper is launchedbefore any program actually tries to create locks!To use it: # We need the loopback device to be up before we do this! ipconfig 127.0.0.1:::::lo:none nfsroot -p pmap_file -o lock server:/pathname /realpath
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -