[Info-vax] How dangerous is it to be able to get into DCL supervisor mode ?

VAXman- at SendSpamHere.ORG VAXman- at SendSpamHere.ORG
Tue Jul 4 11:11:46 EDT 2017


In article <ojg99i$vm8$2 at dont-email.me>, David Froble <davef at tsoft-inc.com> writes:
>VAXman- @SendSpamHere.ORG wrote:
>> In article <ojegsn$kf$1 at dont-email.me>, Simon Clubley <clubley at remove_me.eisner.decus.org-Earth.UFP> writes:
>>> On 2017-07-03, VAXman-  @SendSpamHere.ORG <VAXman- at SendSpamHere.ORG> wrote:
>>>> When in exec mode, one can invoke $CMKRNL and execute code in kernel
>>>> mode without possessing the privies needed for $CMKRNL because there
>>>> is a check for the previous mode being exec.  There's nothing similar
>>>> for $CMEXEC from supervisor mode.  It sure would have removed a few
>>>> hurdles for me when writing my DCL Debugger had that been the case.
>>>>
>>> Thanks Brian.
>>>
>>> There's still the bit about being able to set the privilege bits
>>> in supervisor mode however.
>>>
>>> However, if supervisor mode lets you do that, then that would seem to
>>> defeat the whole point of actually _having_ a supervisor mode. :-)
>> 
>> Because I'm already in supervisor mode with the debugger, I'll check on
>> this but I have some other issues that I need to focus on first.  Also,
>> it's US In-Dependence Day here.
>> 
>
>What do you do in the DCL debugger when the image is interrupted?  Such as 
>CTRL-Y?  I'm going to assume that you don't leave the process in supervisor mode?

*I* don't do anything!  DCL does it! ;)  The debugger is a tiny, relatively
speaking, piece of code that is actived by LOGINOUT.EXE instead of DCL.  It
then activates DCL with a simple intercept in one strategic location.  Save
for that, you have DCL running.  Whatever it does, it does; nothing changes
because of the debugger.  I took extreme precautions to INSURE that there's
no way to exploit my DCL debugger for nefarious malfeasance!



>Which causes me to be curious.  What happens after CTRL-Y and then "CONTINUE"?

The image, assuming it had no CTRL-Y handler if its own to invoke its rundown
or exit, will continue running where it was interrupted. 
-- 
VAXman- A Bored Certified VMS Kernel Mode Hacker    VAXman(at)TMESIS(dot)ORG

I speak to machines with the voice of humanity.



More information about the Info-vax mailing list