hatching / sflock

Sample staging & detonation utility to be used in combination with Cuckoo Sandbox.
82 stars 46 forks source link

zipjail.elf not working on AWS #29

Closed razuz closed 6 years ago

razuz commented 6 years ago

so that it would be noted down the zipjail.elf has different behaviour on AWS rather than on XEN at current outcome. Basically it crashes unpacking rar-s with error :

Blocked system call occurred during sandboxing!
ip=0xffffffffff600409 sp=0x7ffee3c1bbd8 abi=0 nr=201 syscall=time
Killing child 16983

rar versioning does not make any difference ... maybe kernel ?

razuz commented 6 years ago

well well ... the issue arises currently with kernel linux-image-4.4.0-1049-aws with linux-image-4.4.0-1047-aws it's OK