root@LS-SL9AF:~# cat /proc/cpuinfo Processor : ARM926EJ-S rev 0 (v5l) BogoMIPS : 266.24 Features : swp half thumb fastmult edsp CPU implementer : 0x41 CPU architecture: 5TEJ CPU variant : 0x0 CPU part : 0x926 CPU revision : 0 Cache type : write-back Cache clean : cp15 c7 ops Cache lockdown : format C Cache format : Harvard I size : 32768 I assoc : 1 I line length : 32 I sets : 1024 D size : 32768 D assoc : 1 D line length : 32 D sets : 1024 Hardware : Feroceon Revision : 0000 Serial : 0000000000000000 root@LS-SL9AF:~#
root@LS-SL9AF:~# cat /proc/meminfo MemTotal: 125748 kB MemFree: 50600 kB Buffers: 2556 kB Cached: 49880 kB SwapCached: 0 kB Active: 26196 kB Inactive: 38716 kB SwapTotal: 1000428 kB SwapFree: 1000428 kB Dirty: 84 kB Writeback: 0 kB AnonPages: 12492 kB Mapped: 8564 kB Slab: 7340 kB SReclaimable: 1960 kB SUnreclaim: 5380 kB PageTables: 604 kB NFS_Unstable: 0 kB Bounce: 0 kB CommitLimit: 1063300 kB Committed_AS: 90064 kB VmallocTotal: 385024 kB VmallocUsed: 8692 kB VmallocChunk: 368636 kB root@LS-SL9AF:~# free total used free shared buffers Mem: 125748 75148 50600 0 2556 Swap: 1000428 0 1000428 Total: 1126176 75148 1051028 root@LS-SL9AF:~#
root@LS-SL9AF:~# uname -a Linux LS-SL9AF 2.6.22.7-88f5182 #1 Fri Jun 8 11:00:39 JST 2012 armv5tejl unknown root@LS-SL9AF:~#あれ?2.6.22.7 ?
root@LS-SL9AF:~# dmesg Linux version 2.6.22.7-88f5182 (root@NAS) (gcc version 4.2.0 20070413 (prerelease)) #1 Fri Jun 8 11:00:39 JST 2012 CPU: ARM926EJ-S [41069260] revision 0 (ARMv5TEJ), cr=a0053177 Machine: Feroceon Using UBoot passing parameters structure Memory policy: ECC disabled, Data cache writeback On node 0 totalpages: 32768 DMA zone: 256 pages used for memmap DMA zone: 0 pages reserved DMA zone: 32512 pages, LIFO batch:7 Normal zone: 0 pages used for memmap CPU0: D VIVT write-back cache CPU0: I cache: 32768 bytes, associativity 1, 32 byte lines, 1024 sets CPU0: D cache: 32768 bytes, associativity 1, 32 byte lines, 1024 sets Built 1 zonelists. Total pages: 32512 Kernel command line: console=ttyS0,115200 root=/dev/sda2 rw initrd=0x00800040,15M panic=5 func=0 BOOTVER=1.23 PID hash table entries: 512 (order: 9, 2048 bytes) Console: colour dummy device 80x30 Dentry cache hash table entries: 16384 (order: 4, 65536 bytes) Inode-cache hash table entries: 8192 (order: 3, 32768 bytes) Memory: 128MB 0MB 0MB 0MB = 128MB total Memory: 110108KB available (3860K code, 294K data, 120K init) Calibrating delay loop... 266.24 BogoMIPS (lpj=1331200) Mount-cache hash table entries: 512 CPU: Testing write buffer coherency: ok NET: Registered protocol family 16 env_format_version = 0x00000006 product_id = 0x00000013 Sys Clk = 200000000, Tclk = 166664740 CPU Interface ------------- SDRAM_CS0 ....base 00000000, size 128MB SDRAM_CS1 ....disable SDRAM_CS2 ....disable SDRAM_CS3 ....disable PEX0_MEM ....base e0000000, size 128MB PEX0_IO ....base f2000000, size 1MB PCI0_MEM ....base e8000000, size 128MB PCI0_IO ....base f2100000, size 1MB INTER_REGS ....base f1000000, size 1MB DEVICE_CS0 ....no such DEVICE_CS1 ....base f4000000, size 32MB DEVICE_CS2 ....no such DEV_BOOCS ....base ff800000, size 8MB CRYPT_ENG ....base f0000000, size 64KB Marvell Development Board (LSP Version 3.0.5_NAS_GDP_p8)-- BUFFALO_BOARD Soc: 88F5182 A2 Detected Tclk 166664740 and SysClk 200000000 Marvell USB EHCI Host controller #0: c055b600 Marvell USB EHCI Host controller #1: c055b400 IO Request resource failed - Pci If 0 PCI: bus0: Fast back to back transfers enabled PCI: bus1: Fast back to back transfers enabled SCSI subsystem initialized Time: orion_clocksource clocksource has been installed. NET: Registered protocol family 2 IP route cache hash table entries: 1024 (order: 0, 4096 bytes) TCP established hash table entries: 4096 (order: 3, 32768 bytes) TCP bind hash table entries: 4096 (order: 2, 16384 bytes) TCP: Hash tables configured (established 4096 bind 4096) TCP reno registered checking if image is initramfs...it isn't (no cpio magic); looks like an initrd Freeing initrd memory: 15360K RTC registered mvCesaInit: sessions=640, queue=64, pSram=f0000000 Use the XOR engines (acceleration) for enhancing the following functions: o RAID 5 Xor calculation o kernel memcpy o kenrel memzero o copy user to/from kernel buffers Number of XOR engines to use: 2 Use IDMA channels 2 and 3 for enhancing the following function: VFS: Disk quotas dquot_6.5.1 Dquot-cache hash table entries: 1024 (order 0, 4096 bytes) fuse init (API version 7.8) SGI XFS with ACLs, large block numbers, no debug enabled SGI XFS Quota Management subsystem io scheduler noop registered (default) io scheduler anticipatory registered io scheduler deadline registered io scheduler cfq registered Serial: 8250/16550 driver $Revision: 1.90 $ 4 ports, IRQ sharing disabled serial8250: ttyS1 at MMIO 0x0 (irq = 4) is a 16550A serial8250.0: ttyS0 at MMIO 0xf1012000 (irq = 3) is a 16550A serial8250.0: ttyS2 at MMIO 0xf1012100 (irq = 4) is a 16550A RAMDISK driver initialized: 3 RAM disks of 32768K size 1024 blocksize loop: module loaded Marvell Ethernet Driver 'mv_ethernet': o Uncached descriptors in DRAM o DRAM SW cache-coherency o TCP segmentation offload enabled o Checksum offload enabled o Rx desc: 128 o Tx desc: 256 o Loading network interface ** eth_init_module (0) 'eth0' Intergrated Sata device found scsi0 : Marvell SCSI to SATA adapter scsi1 : Marvell SCSI to SATA adapter scsi 0:0:0:0: Direct-Access Seagate ST9100828AS 3.BH PQ: 0 ANSI: 5 sd 0:0:0:0: [sda] 195371568 512-byte hardware sectors (100030 MB) sd 0:0:0:0: [sda] Write Protect is off sd 0:0:0:0: [sda] Mode Sense: 23 00 00 00 sd 0:0:0:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA sd 0:0:0:0: [sda] 195371568 512-byte hardware sectors (100030 MB) sd 0:0:0:0: [sda] Write Protect is off sd 0:0:0:0: [sda] Mode Sense: 23 00 00 00 sd 0:0:0:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA sda: sda1 sda2 sda3 sda4 sda5 sda6 sd 0:0:0:0: [sda] Attached SCSI disk sd 0:0:0:0: Attached scsi generic sg0 type 0 physmap platform flash device: 01000000 at f0000000 CFI: Found no physmap-flash.0 device at location zero JEDEC: Found no physmap-flash.0 device at location zero physmap-flash physmap-flash.0: map_probe failed CFI: Found no cfi_flash_0 device at location zero Found: SST 39LF020 cfi_flash_0: Found 1 x8 devices at 0x0 in 8-bit bank cfi_flash_0: Found an alias at 0x40000 for the chip at 0x0 cfi_flash_0: Found an alias at 0x80000 for the chip at 0x0 cfi_flash_0: Found an alias at 0xc0000 for the chip at 0x0 cfi_flash_0: Found an alias at 0x100000 for the chip at 0x0 cfi_flash_0: Found an alias at 0x140000 for the chip at 0x0 cfi_flash_0: Found an alias at 0x180000 for the chip at 0x0 cfi_flash_0: Found an alias at 0x1c0000 for the chip at 0x0 cfi_flash_0: Found an alias at 0x200000 for the chip at 0x0 cfi_flash_0: Found an alias at 0x240000 for the chip at 0x0 cfi_flash_0: Found an alias at 0x280000 for the chip at 0x0 cfi_flash_0: Found an alias at 0x2c0000 for the chip at 0x0 cfi_flash_0: Found an alias at 0x300000 for the chip at 0x0 cfi_flash_0: Found an alias at 0x340000 for the chip at 0x0 cfi_flash_0: Found an alias at 0x380000 for the chip at 0x0 cfi_flash_0: Found an alias at 0x3c0000 for the chip at 0x0 cfi_flash_0: Found an alias at 0x400000 for the chip at 0x0 cfi_flash_0: Found an alias at 0x440000 for the chip at 0x0 cfi_flash_0: Found an alias at 0x480000 for the chip at 0x0 cfi_flash_0: Found an alias at 0x4c0000 for the chip at 0x0 cfi_flash_0: Found an alias at 0x500000 for the chip at 0x0 cfi_flash_0: Found an alias at 0x540000 for the chip at 0x0 cfi_flash_0: Found an alias at 0x580000 for the chip at 0x0 cfi_flash_0: Found an alias at 0x5c0000 for the chip at 0x0 cfi_flash_0: Found an alias at 0x600000 for the chip at 0x0 cfi_flash_0: Found an alias at 0x640000 for the chip at 0x0 cfi_flash_0: Found an alias at 0x680000 for the chip at 0x0 cfi_flash_0: Found an alias at 0x6c0000 for the chip at 0x0 cfi_flash_0: Found an alias at 0x700000 for the chip at 0x0 cfi_flash_0: Found an alias at 0x740000 for the chip at 0x0 cfi_flash_0: Found an alias at 0x780000 for the chip at 0x0 cfi_flash_0: Found an alias at 0x7c0000 for the chip at 0x0 number of JEDEC chips: 1 cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness. cmdlinepart partition parsing not available CFI: Found no cfi_flash_1 device at location zero JEDEC: Found no cfi_flash_1 device at location zero mice: PS/2 mouse device common for all mice md: raid0 personality registered for level 0 md: raid1 personality registered for level 1 raid6: int32x1 20 MB/s raid6: int32x2 28 MB/s raid6: int32x4 35 MB/s raid6: int32x8 31 MB/s raid6: using algorithm int32x4 (35 MB/s) md: raid6 personality registered for level 6 md: raid5 personality registered for level 5 md: raid4 personality registered for level 4 raid5: measuring checksumming speed arm4regs : 292.400 MB/sec 8regs : 242.400 MB/sec 32regs : 256.000 MB/sec raid5: using function: arm4regs (292.400 MB/sec) Kernel event proc (C) BUFFALO INC. V.1.00 installed. MICON ctrl (C) BUFFALO INC. V.1.00 installed. Buffalo CPU Inerupts Driver (C) BUFFALO INC. Ver.0.01 alpha1 installed. Buffalo Gpio Control Driver (C) BUFFALO INC. Ver.0.02 installed. TCP cubic registered NET: Registered protocol family 1 NET: Registered protocol family 17 md: Autodetecting RAID arrays. md: autorun ... md: ... autorun DONE. RAMDISK: Compressed image found at block 0 VFS: Mounted root (ext2 filesystem). md: md0 stopped. md: bind<sda1> raid1: raid set md0 active with 1 out of 2 mirrors kjournald starting. Commit interval 5 seconds EXT3 FS on md0, internal journal EXT3-fs: mounted filesystem with ordered data mode. md: md10 stopped. md: bind<sda5> raid1: raid set md10 active with 1 out of 2 mirrors md: md1 stopped. md: bind<sda2> raid1: raid set md1 active with 1 out of 2 mirrors kjournald starting. Commit interval 5 seconds EXT3 FS on md1, internal journal EXT3-fs: mounted filesystem with ordered data mode. kjournald starting. Commit interval 5 seconds EXT3 FS on md1, internal journal EXT3-fs: mounted filesystem with ordered data mode. VFS: Mounted root (ext3 filesystem). Trying to move old root to /initrd ... okay Freeing init memory: 120K Adding 1000428k swap on /dev/md10. Priority:-1 extents:1 across:1000428k kjournald starting. Commit interval 5 seconds EXT3 FS on md0, internal journal EXT3-fs: mounted filesystem with ordered data mode. usbcore: registered new interface driver usbfs usbcore: registered new interface driver hub usbcore: registered new device driver usb ehci_marvell ehci_marvell.4523: Marvell Orion EHCI ehci_marvell ehci_marvell.4523: new USB bus registered, assigned bus number 1 ehci_marvell ehci_marvell.4523: irq 17, io base 0xf1050100 ehci_marvell ehci_marvell.4523: USB 2.0 started, EHCI 1.00, driver 10 Dec 2004 usb usb1: configuration #1 chosen from 1 choice hub 1-0:1.0: USB hub found hub 1-0:1.0: 1 port detected ehci_marvell ehci_marvell.167817: Marvell Orion EHCI ehci_marvell ehci_marvell.167817: new USB bus registered, assigned bus number 2 ehci_marvell ehci_marvell.167817: irq 12, io base 0xf10a0100 ehci_marvell ehci_marvell.167817: USB 2.0 started, EHCI 1.00, driver 10 Dec 2004 usb usb2: configuration #1 chosen from 1 choice hub 2-0:1.0: USB hub found hub 2-0:1.0: 1 port detected ohci_hcd: 2006 August 04 USB 1.1 'Open' Host Controller (OHCI) Driver USB Universal Host Controller Interface driver v3.0 Initializing USB Mass Storage driver... usbcore: registered new interface driver usb-storage USB Mass Storage support registered. usbcore: registered new interface driver usblp drivers/usb/class/usblp.c: v0.13: USB Printer Device Class driver eth reg(9) val=0x0300 program smartctl is using a deprecated SCSI ioctl, please convert it to SG_IO program smartctl is using a deprecated SCSI ioctl, please convert it to SG_IO program smartctl is using a deprecated SCSI ioctl, please convert it to SG_IO program smartctl is using a deprecated SCSI ioctl, please convert it to SG_IO program smartctl is using a deprecated SCSI ioctl, please convert it to SG_IO program smartctl is using a deprecated SCSI ioctl, please convert it to SG_IO program smartctl is using a deprecated SCSI ioctl, please convert it to SG_IO program smartctl is using a deprecated SCSI ioctl, please convert it to SG_IO XFS mounting filesystem sda6 Ending clean XFS mount for filesystem: sda6 root@LS-SL9AF:~#
root@LS-SL9AF:~# cat /etc/linkstation_release VERSION=1.60 SUBVERSION=HDD 3.02 PRODUCTID=0x00000000 BUILDDATE=2012/06/18 18:57:41 root@LS-SL9AF:~# cat /proc/buffalo/firmware SERIES=LinkStation PRODUCTNAME=LS-SL(SEINEI) VERSION=0.16 SUBVERSION=FLASH 0.00 PRODUCTID=0x00000013 BUILDDATE=2012/06/08 10:59:45 BOOTVER=1.23 root@LS-SL9AF:~#以前は SEIMEI だったのに、SEINEI になっている。
root@LS-SL9AF:~# ps PID Uid VSZ Stat Command 1 root 3084 S init 2 root SW< [kthreadd] 3 root SWN [ksoftirqd/0] 4 root SW< [events/0] 5 root SW< [khelper] 32 root SW< [kblockd/0] 45 root SW [crypto] 46 root SW [crypto_ret] 49 root SW [pdflush] 50 root SW [pdflush] 51 root SW< [kswapd0] 52 root SW< [aio/0] 54 root SW< [xfslogd/0] 55 root SW< [xfsdatad/0] 243 root SW< [scsi_eh_0] 244 root SW< [scsi_eh_1] 260 root SW< [mtdblockd] 393 root SW< [md0_raid1] 436 root SW< [md10_raid1] 441 root SW< [md1_raid1] 520 root SW< [kjournald] 561 root 1720 S < /sbin/udevd --daemon 1457 root SW< [kjournald] 1505 root SW< [khubd] 1608 root 1620 S /sbin/dhcpcd -L /etc/dhcpc -h LS-SL9AF -t 15 -x -y -z 1671 root 1856 S syslogd -m 0 1673 root 2380 S klogd 1682 root 3620 S /usr/sbin/inetd 1686 root 1824 S /usr/local/sbin/errormon 1691 root 2208 S /bin/sh /usr/local/sbin/kernelmon 1698 root 27216 S /usr/bin/python /usr/local/sbin/BuffaloXMLRPCServer.p 1937 root SW< [xfsbufd] 1938 root SW< [xfssyncd] 2120 root 2040 S mdadm --monitor --scan --daemonise --pid-file /var/ru 2339 root 1804 S /usr/local/sbin/logchkd 2389 root 2772 S /bin/bash /usr/local/sbin/diskmon_exec.sh start 2401 root 4352 S /usr/sbin/lighttpd.webui -f /etc/lighttpd/buffalo-web 2423 root 4352 S /usr/sbin/lighttpd.webui -f /etc/lighttpd/buffalo-web 2512 root 10348 S /usr/local/sbin/smbd -D 2531 root 10348 S /usr/local/sbin/smbd -D 2532 root 6020 S /usr/local/sbin/nmbd -D 2578 root 2152 S /usr/local/sbin/clientUtil_server -i eth0 2606 root 1740 S /usr/local/sbin/mDNSResponderPosix -b -f /etc/bonjour 2609 root 4172 S /usr/local/sbin/lsprcvd -i eth0 2612 root 1796 S /usr/local/sbin/daemonwatch -a /etc/daemonwatch.list 2618 root 3360 S /usr/sbin/crond 2674 root 18092 S /usr/local/BootServer/rarpd 2677 root 9892 S /usr/local/BootServer/rarpcfgd 2683 root 1568 S /usr/local/BootServer/fwupdated 2684 root 1700 S /usr/local/BootServer/tftpd 2711 root 2272 S lpd Waiting 2871 root 2700 S /usr/local/twonky/twonkymedia -utf8 -inifile /usr/loc 2872 root 9444 S /usr/local/twonky/twonkymediaserver -utf8 -inifile /u 2918 root 3212 S /usr/local/sbin/mt-daapd -c /etc/mt-daapd.conf 2919 root 11400 S /usr/local/sbin/mt-daapd -c /etc/mt-daapd.conf 2981 root 4028 S /usr/local/sbin/sshd 3148 root 3228 S cat /proc/buffalo/kernevnt 3240 root 2784 S /bin/login -- 3576 root 2340 S -bash 7529 root 3228 S sleep 10 7530 root 3364 R ps root@LS-SL9AF:~#
root@LS-SL9AF:~# cat /proc/mdstat Personalities : [raid0] [raid1] [raid6] [raid5] [raid4] md1 : active raid1 sda2[0] 4999156 blocks super 1.2 [2/1] [U_] md10 : active raid1 sda5[0] 1000436 blocks super 1.2 [2/1] [U_] md0 : active raid1 sda1[0] 1000384 blocks [2/1] [U_] unused devices:root@LS-SL9AF:~#
root@LS-SL9AF:~# df Filesystem 1k-blocks Used Available Use% Mounted on /dev/md1 4920624 829808 3840860 18% / udev 10240 100 10140 1% /dev /dev/ram1 15360 152 15208 1% /mnt/ram /dev/md0 992440 50288 942152 5% /boot /dev/disk1_6 82803264 159784 82643480 0% /mnt/disk1 root@LS-SL9AF:~# mount rootfs on / type rootfs (rw) /dev/root on / type ext3 (rw,data=ordered) proc on /proc type proc (rw) sysfs on /sys type sysfs (rw) udev on /dev type tmpfs (rw,nosuid) devpts on /dev/pts type devpts (rw) /dev/ram1 on /mnt/ram type tmpfs (rw) /dev/md0 on /boot type ext3 (rw,data=ordered) usbfs on /proc/bus/usb type usbfs (rw) /dev/disk1_6 on /mnt/disk1 type xfs (rw,noatime,usrquota,grpquota) root@LS-SL9AF:~#/ も /boot も ext3 でマウントされている
|
← ログイン可能にする |
ハックの記録 LinkStation/玄箱 をハックしよう |
→ RAM root にログインできるようにする |
Copyright (C) 2003-2012 Yasunari Yamashita. All Rights Reserved.
yasunari @ yamasita.jp 山下康成@京都府向日市