Murga-Projects Forums

Full Version: Praise for murgalua
You're currently viewing a stripped down version of our content. View the full version with proper formatting.

asafp Wrote:
When executing with env command, the error message is a little different. It refers to the directory.

env ~ ./murgaLua

env: /mnt/b02add6f/www: Permission denied


That is what you should expect: "env ~ ./murgaLua" expands to "env /mnt/b02add6f/www ./murgaLua". So you are telling env to exec your home directory with the additional parameter "./murgaLua" which is clearly not supposed to work. You should have typed "env ~/murgaLua" but this may not work if /mnt/b02add6f" is mounted with the noexec option. You can check this with "env /bin/mount" or "cat /proc/$$/mounts". If this is the case then it will be not "that easy" to circumvent, and might be a little bit to intrusive (to start with more aggressive methods). In this case it would be a better idea to switch to another provider which has a more liberal setup.

If your home directory is mounted with the noexec option there is one thing that could (temporarily) work (it is fixed with kernels >=2.6.24 and should also be fixed with security backports for older kernels): You should get a stock lua binary or unpack murgaLua (upx -d) and then copy it in your homedir. Then you can try to invoke it with "env /lib/ld-linux.so.2 ~/murgaLua" or with awk,.... (but always through /lib/ld-linux.so.2). But as I said, it is most likely that it won't work, if the kernel is up to date.

Juergen

env ~/murgaLua
env: /mnt/b02add6f/www/murgaLua: Permission denied

env /bin/mount
env: /bin/mount: No such file or directory

cat /proc/$$/mounts
cat: /proc/30800/mounts: No such file or directory

env /lib/ld-linux.so.2 ~/murgaLua
env: /lib/ld-linux.so.2: No such file or directory

No luck. In the past when I've asked why there is no gcc compiler or why I can't install software or execute programs, the answer is always that some people have abused the privilege. I've never been able to get a specific answer as to what the abuse was. I suspect they just want to discourage you from using cpu cycles and bandwidth unless you want to upgrade to one of their more expensive deluxe hosting packages.

In my case, I just end up burning cpu cycles and bandwidth with awk or python instead of murgaLua.

asafp Wrote:
env ~/murgaLua
env: /mnt/b02add6f/www/murgaLua: Permission denied

Most likely mounted with noexec.

Quote:
env /bin/mount
env: /bin/mount: No such file or directory

could be also /sbin/mount or you are in a special environment, where no mount exists.

Quote:
cat /proc/$$/mounts
cat: /proc/30800/mounts: No such file or directory

does /proc exist?

Quote:
env /lib/ld-linux.so.2 ~/murgaLua
env: /lib/ld-linux.so.2: No such file or directory

is this a Linux system after all? (and not a Slowaris or HP-SUX or something else?) what does uname -a say? (or env /bin/uname -a)

Quote:
No luck. In the past when I've asked why there is no gcc compiler or why I can't install software or execute programs, the answer is always that some people have abused the privilege. I've never been able to get a specific answer as to what the abuse was. I suspect they just want to discourage you from using cpu cycles and bandwidth unless you want to upgrade to one of their more expensive deluxe hosting packages.

If you can run binaries, then you can install nearly everything. It would be possible to install something like OpenOffice and run it remote or install a file sharing client, organizing a botnet, sending out spam, ... , jeopardizing system integrity and doing all sorts of nasty things.
And traffic accounting and bandwidth limiting could also be bypassed.

Quote:
In my case, I just end up burning cpu cycles and bandwidth with awk or python instead of murgaLua.

Python is not that bad. And it would be a lot better, if it wouldn't use the indentation nonsense ;-)

Juergen

You are right. It's freebsd. I found that out by running python. (The operating system displays when you run python in interactive mode.)

So, there is no /proc and no uname command.

I have encountered the same issue on systems that I know are debian linux, so I'll try your suggestions there when the situation arises in the future.

Thanks for your help.

p.s. yes, the python indention is a royal pain. I thought it was kind of cool when I was first learning python, but it gets in the way when you are trying to do something quick and copying and pasting and that kind of thing.
Pages: 1 2
Reference URL's