Just a simple change to an unguarded file, and anyone who uses Red Star OS can get root. Of course, that's a pretty small population of potential hackers.
North Korea is a technological island in many ways. Almost all of the country's "Internet" is run as a private network, with all connections to the greater global Internet through a collection of proxies. And the majority of the people of the Democratic People's Republic of Korea who have access to that network rely on the country's official operating system: a Linux variant called Red Star OS.
Red Star OS, first introduced in 2003, was originally derived from Red Hat Linux. In theory, it gave North Korea an improved level of security against outside attacka Security Enhanced Linux operating system based on Red Hat that could enforce strict government access controls on the few who got to use it.
However, because Red Star has had so few people with access to it, one of the ironic side effects has been that security holes in the operating system may have gone undetected. And as a security researcher who tested the latest release of Red Star's desktop version reported today, one flaw in the system would allow any user to elevate their privileges to those of the system's root account and bypass all those security policies put in place by the North Korean regime.
Red Star OS Desktop 3.0, which recentlyfound its way ontotorrents and various download sites as an .ISO image, is interesting for a number of reasons, including its attempt to look like Apple's Mac OS X (earlier versions of Red Star mimicked Windows' user interface).
But as an anonymous researcher referring to himself as "Hacker Fantastic" noted in a post today to the Open Source Software Security (oss-sec) mailing list, it also has one significant security hole: a mistake made in permissions settings on a key file that allows anyone with access to the system to run commands as root. "Red Star 3.0 desktop ships with a world-writeable udev rules '/etc/udev/rules.d/85-hplj10xx.rules' which can be modified to include 'RUN+=' arguments executing commands as root by udev.d," the researcher wrote.
Udev.d is a generic kernel device manager that can identify hardware "hot-plugged" into a Linux system. The rules file determines how to handle the events associated with the connection of a new device and can include commands to be launched when certain devices are connectedcommands that are run with system-level privileges. The "85-hplj10xx.rules" file is the ruleset associated with drivers for a USB-connected Hewlett Packard LaserJet 1000 series printer and is common to most Linux distributions.
That's probably not a device most North Koreans would typically hot-plug into their PCs. But because the permissions on that file are set as "world writable," any user regardless of permission levels could make changes to the rules to activate it for any device and execute any command they wanted with system-level privileges.
Ironically, there's a similar file permission error that the researcher discovered in Red Star OS 2.0's desktop version, in a different file that's even easier to abusethe system configuration file for Linux's rc utility, which manages the operating system's boot-up. That vulnerability would allow anyone to add commands to be executed during system boot--a great way to ensure that surveillance software or other malware loads up persistently.
Configuration errors like these in the default installation of North Korea's official desktop operating system suggest that there are other security flaws to be found in Red Star. And the NSA may have already found them.
Here is the original post:
Heads up, dear leader: Security hole found in North Koreas home-grown OS
- Hang onto your hats--More Redheads RFL Shopping 🙂 - November 8th, 2009 [November 8th, 2009]
- Why I Relay -- from Daaneth Kivioq - November 8th, 2009 [November 8th, 2009]
- Two Upcoming Events! - November 8th, 2009 [November 8th, 2009]
- We had fun AND ... - November 8th, 2009 [November 8th, 2009]
- Why I Relay -- from Edith Halderman & Envy Watts - November 8th, 2009 [November 8th, 2009]
- Toga! Toga! We had fun and raised 5k for RFL! - November 8th, 2009 [November 8th, 2009]
- "Duel of the DJ's" --THIS Sunday, April 19 at 1pm - November 8th, 2009 [November 8th, 2009]
- Dressing for Relay Events... Lag in Style! - November 8th, 2009 [November 8th, 2009]
- "Duel of the DJ's" -- TODAY Sun, April 19 at 1pm - November 8th, 2009 [November 8th, 2009]
- Relay Shopping Made Easy! Our Very Own Store! - November 8th, 2009 [November 8th, 2009]
- We have a winner! - November 8th, 2009 [November 8th, 2009]
- Not to Miss! Frogg & Jaycatt Saturday at 1pm SLT - November 8th, 2009 [November 8th, 2009]
- Thank You Frogg, Jaycatt, Lomgren and Luskwood! GO RELAY! - November 8th, 2009 [November 8th, 2009]
- Upcoming Events in Redhead-land - November 8th, 2009 [November 8th, 2009]
- In Memory of ... Lachlan Campbell - November 8th, 2009 [November 8th, 2009]
- More Goodies in Our RFL Store - November 8th, 2009 [November 8th, 2009]
- The BIG Blowout Event! 12-3pm SLT Tomorrow! - November 8th, 2009 [November 8th, 2009]
- ONE WORLD, ONE HOPE! - November 8th, 2009 [November 8th, 2009]
- We miss you Fimi! - November 8th, 2009 [November 8th, 2009]
- Redheads Know How To Partay!!! - November 8th, 2009 [November 8th, 2009]
- We had a BALL! And the SILENT AUCTION continues... - November 8th, 2009 [November 8th, 2009]
- RenFaire! - November 8th, 2009 [November 8th, 2009]
- Rocking With Yahshvah Shinja - November 8th, 2009 [November 8th, 2009]
- WOW! - November 8th, 2009 [November 8th, 2009]
- What a weekend that was! - November 8th, 2009 [November 8th, 2009]
- 2010 Blog! - April 4th, 2010 [April 4th, 2010]
- Brian Scalabrine - The World's Greatest - Video - March 29th, 2012 [March 29th, 2012]
- Red strength hint in caution notice - April 25th, 2012 [April 25th, 2012]
- Emma Roberts turns heads at Coachella - April 25th, 2012 [April 25th, 2012]
- Cartoon of the Day: Chelsea's battered bus leaves Terry behind and heads for Munich after rolling over Barcelona - April 25th, 2012 [April 25th, 2012]
- Kaskade Heads Out On 'Freaks Of Nature' Tour, Gives Us Full-Body Chills (VIDEO) - April 25th, 2012 [April 25th, 2012]
- Red shirts divided over Prem meet - April 25th, 2012 [April 25th, 2012]
- Snobby Mr. Douchey - Ep: 6 - Video - May 4th, 2012 [May 4th, 2012]
- Ep. 3 MALLSCAPADE: Squaresville (A new free web show about growing up bored in the suburbs) - Video - May 4th, 2012 [May 4th, 2012]
- My Sisters: Problematic to Practically Perfect - Ep: 2 - Video - May 4th, 2012 [May 4th, 2012]
- Backstage Girls- Episode 2: Bobby Brown's Every Little Step - Video - May 4th, 2012 [May 4th, 2012]
- Red Heads for Red Heads with Cornelia Frances for The Orangutan Project - Video - May 4th, 2012 [May 4th, 2012]
- More Theatre of Life: Gay Witchcraft - Video - May 4th, 2012 [May 4th, 2012]
- Asian Red Head - Video - May 4th, 2012 [May 4th, 2012]
- Red Devils baseball team wins play-in game vs. North Sevier, heads to 2A tourney - May 5th, 2012 [May 5th, 2012]
- Ask Nick: Is something wrong with Gonzalez? - May 5th, 2012 [May 5th, 2012]
- Red Bluff Lady Spartans blast Lassen 13-0 - May 5th, 2012 [May 5th, 2012]
- Camelot heads 2,000 Guineas field - May 5th, 2012 [May 5th, 2012]
- Tech baseball heads to College Station for final time - May 5th, 2012 [May 5th, 2012]
- Joe Stortini heads list of local all-state basketball players - May 5th, 2012 [May 5th, 2012]
- 'White Rabbit, Red Rabbit' review: never the same - May 7th, 2012 [May 7th, 2012]
- Red sea of Clippers fans lifts team to win - May 7th, 2012 [May 7th, 2012]
- Reynolds and Hammel carry Orioles past Red Sox 8-2 - May 7th, 2012 [May 7th, 2012]
- Gillard, Abbott promote Red Cross - May 7th, 2012 [May 7th, 2012]
- The Duchess of Cambridge turns heads with glamorous cream dress - May 10th, 2012 [May 10th, 2012]
- Royals 4, Red Sox 3: Two out of three is bad - May 10th, 2012 [May 10th, 2012]
- The power of a sign - May 10th, 2012 [May 10th, 2012]
- Met Ball 2012 Red Carpet: Stars Shine In Metallic Frocks - May 10th, 2012 [May 10th, 2012]
- Morning Mail: Red Sox fan wears bag on head, starts social media storm - May 13th, 2012 [May 13th, 2012]
- 'Food Truck Wars' heads for Monmouth Park - May 13th, 2012 [May 13th, 2012]
- Obama to talk mortgages in Reno, Romney heads to North Carolina, plus more to watch for this weekend in politics - May 13th, 2012 [May 13th, 2012]
- Losing heads while salmon fishing - May 13th, 2012 [May 13th, 2012]
- West Ottawa boys track & field wins stunning relay at OK Red meet - May 13th, 2012 [May 13th, 2012]
- Sexy Redheads - Video - May 13th, 2012 [May 13th, 2012]
- Red Sox Look to Build Momentum Against Mariners: Fan Preview - May 16th, 2012 [May 16th, 2012]
- Red-cockaded woodpecker gets care and protection in Alabama (with video and gallery) - May 16th, 2012 [May 16th, 2012]
- Beckett takes Red Sox from Fenway to Bushwood - May 16th, 2012 [May 16th, 2012]
- Greek uncertainty leaves US stocks in red - May 16th, 2012 [May 16th, 2012]
- Greece Heads Toward New Elections - May 16th, 2012 [May 16th, 2012]
- On Soccer: Red Bulls rise to top of Eastern Conference with help from trio of young American defenders - May 16th, 2012 [May 16th, 2012]
- Frankel heads Lockinge confirmations - May 16th, 2012 [May 16th, 2012]
- Kevin Spacey heads to South Africa for movie project premiere - May 16th, 2012 [May 16th, 2012]
- Red Poppy brings new voices to art scene - May 16th, 2012 [May 16th, 2012]
- Gold Heads Into The Red In 2012 - May 17th, 2012 [May 17th, 2012]
- Betty White heads to Washington to see the animals - May 17th, 2012 [May 17th, 2012]
- Outdoors: Losing your heads against fishing rules - May 17th, 2012 [May 17th, 2012]
- Betty White heads to nation's capital to see National Zoo, indulge passion for animal watching - May 17th, 2012 [May 17th, 2012]
- Canadian wave heads to Cannes Film Festival - May 17th, 2012 [May 17th, 2012]
- Pippa Middleton Wears Sexy Red Dress at Scottish Wedding - May 20th, 2012 [May 20th, 2012]
- Touchdowns for a cure - May 20th, 2012 [May 20th, 2012]
- TSX heads higher; Facebook shares rise after delayed start of trading - May 20th, 2012 [May 20th, 2012]
- Woman heads to Uganda to bring cheer to children - May 20th, 2012 [May 20th, 2012]
- World Premiere of Disney•Pixar’s “Brave” Heads to Hollywood for Grand Opening of the Dolby Theatre - May 20th, 2012 [May 20th, 2012]
- Toronto stock market heads higher amid cautious buying at end of bruising week - May 20th, 2012 [May 20th, 2012]
- Red Bluff brings home 11th section title; McColpin throws shutout vs. Wolves - May 20th, 2012 [May 20th, 2012]