BETA: Revue Root (Not for general public use)

[cj_000]

I have another idea for permanent root and I'll try it soon:
We could place a binary somewhere like on /data-partition.
Then set the owner to root and give him the +s flag so it will be always executed as root.

If we do that with a binary like busybox we should be able todo everything as root without exploits.

Good idea, however the Revue auto-mounts /data nosuid, so that bit doesn't take effect. As for sticking it somewhere else, it's the whole signed partition thing again.

[famewolf]

Anyone still doing ANYTHING on this or has it been totally abandoned?

[M1cha]

hi there is a generic linux root exploit for all kernel versions:
http://m.h-online.com/open/news/item/Ex ... -classic=1
http://fucksheep.org/~sd/warez/semtex.c

Can this work on revue?
I tried it but it fails there:
semtex: /home/m1cha/Downloads/semtex.c:63: main: Assertion `(map = mmap((void*)0x380000000, 0x010000000, 3, 0x32, 0,0)) == (void*)0x380000000' failed

There is a define with the BASE address. I don't know how to fix it.