Linux kernel - The Hypervisor Weak Point?

[Chouonsoku]

I'm gonna install YDL 5.0 again. Had it on my old PS3 but it got but it got messed up so the system was replaced. I'd be happy to help you with this stuff hacked, and maybe look into other things.

[hacked2123]

More on peaking through the hyper visor, if any of you haven't installed UDF 2.5 support TYPE ls -l /dev/cdrom: with the colon at the end. It should work either installed UDF2.5 or not. When you do this with a game inserted the game's contents load up. I am looking at the kboot for mounting as to see why. The directories are hidden(almost removed), but are accessable through that option.

[CJPC]

Which bootloader are you using? Cant seem to recreate it!

[tworkemon]

Ohh man why didnt I run into this early... I havent really had times to look through the kboot files but I will now Good job

[hacked2123]

Originally Posted by CJPC Which bootloader are you using? Cant seem to recreate it!

I am using YDL 5 out of box from before it was released on the public mirrors. cd /dev/cdrom: should produce the same results, this from the kboot: screen and has worked for FNR: 3 and Resistance, but doesn't work on Talladega Nights. I get one message saying the 201 not 250 error, and the other displaying the information I asked for, if you want I can make a quick video. The only reason I post is because I can't take it any further, it's some sort of temporary mounting. The mount command and dir command don't do any good.

also try
ls -l /dev/sda1:

[hacked2123]

here's the photo's of what I did. These photo's the first are of the temp memory address (always the same) of the cdrom drive. The last to are what I talk about with ls -l

Attached Images

	Pict0014.jpg (36.4 KB, 204 views)
	Pict0015.jpg (32.3 KB, 111 views)
	Pict0016.jpg (33.8 KB, 97 views)
	Pict0017.jpg (37.4 KB, 138 views)
	Pict0018.jpg (162.0 KB, 197 views)

[hacked2123]

CJPC that hex that appears in the picture is the UUID. I'm sure you know this but in the terminal you can type: ls -l /dev/disk/by-uuid

As always trying new stuff to find the back-door if ever one is there. also try by-path and all things link back to pci_ps3pf_store.0(or 1 or 2)-scsi

Last edited by hacked2123; 02-28-2007 at 03:44 AM.

[MIPs]

Has anyone been able to implement any hypervisor calls in C using the hvcall definition files. I'm having a little trouble myself with the lack of example code.

Also, at what level are the HV calls implemented? Drivers don't seem to make the calls directly(unless I'm missing something). Which makes sense because that would be a major rewrite, but does that mean they are being implemented during the assembling or linking stage?

[CJPC]

Originally Posted by hacked2123 CJPC that hex that appears in the picture is the UUID. I'm sure you know this but in the terminal you can type: ls -l /dev/disk/by-uuid

Ahh, that makes sense then, you solved the mystery hashes! Naah, I didnt know that at all, good to know tho now.

What we do know however is that our pal the hypervisor resides inside the PS3, and not on the hdd (for what its worth, one less place to look) Something in one of the kernel patch files needs to give us a hint! Oh BTW Hacked2123, its the CELL Addon CD about the kboot stuff!

[hacked2123]

Originally Posted by CJPC Ahh, that makes sense then, you solved the mystery hashes! Naah, I didnt know that at all, good to know tho now. What we do know however is that our pal the hypervisor resides inside the PS3, and not on the hdd (for what its worth, one less place to look) Something in one of the kernel patch files needs to give us a hint! Oh BTW Hacked2123, its the CELL Addon CD about the kboot stuff!

It's time's like these I wish I had decided to be a CE major and take apart my PS3 and rig up some hardware modifactions to understand the processes being undertaken with the HV.

Continuing on my mission though. (BTW anyone interested/has connections with a company that would like Hacked2123 as an intern?)