[Exploit] Implement actual CAP_SYS_MODULE escape in CDK
Open
enhancement
- Dominant language
- Go
- Stars
- 4.7k
- Forks
- 608
- PR merge metrics
- No merged PRs in 30d
Description
From: @nikitastupin in #20
The reason why I didn't implement actual `CAP_SYS_MODULE` escape in CDK is because each kernel version and architecture combination requires kernel module built specifically for it. Given how many kernel versions and architectures out there I see several options:
- To make detailed instructions on how to build kernel module for arbitrary kernel version and architecture and put them to CDK.
- To prebuilt kernel module for most popular distributions (e.g. Ubuntu 20.04) include them in CDK binary and leave note on how to build kernel module for other kernel versions.
Great thanks to Nikita.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.