First page Back Continue Last page Summary Graphics
Honeypot
Stack smashes must work
Process stack top at 0xc0000000
'jail' puts stack top at 0xa0000000
Notes:
The reason that 'honeypot' mode locates the process stack in the same place that it is on the host is that stack smash attacks must work. If they didn't, UML would not be useful as a honeypot because it would be impossible (or at least difficult) to break into them.