Cleanup apport_abrt_chroot_priv_esc

[bcoles]

Updates the apport_abrt_chroot_priv_esc module to be more in-line with current Linux LPE modules through code style changes and using new libs.

Also fixes a few issues when using the module on Meterpreter sessions:

• The module made use of cd, which won't work on Meterpreter sessions, causing hard linking to fail, causing the exploit to fail. Using cd also results in the exploit directory generated by the exploit to appear in the working directory, not the intended directory, resulting in the directory not being cleaned up after a failed exploitation attempt.
• The module upgraded the session in a new process (sub-shell) prior to executing the payload. This implementation works for command shell sessions, but was unsafe for Meterpreter sessions, and would cause the exploit to fail.

Note, it should work on Ubuntu 14.04.1 out of the box; but if you're testing on Fedora 19/20/21, you'll likely need to reintroduce the vulnerability as per #9399 (comment) #9399 (comment) (although disabling SELinux should not be necessary) - unless you feel like attempting to cherry pick the appropriate packages.

[bcoles]

@msjenkins-r7 would you lie to me?

[wchen-r7]

Module works for me. I'll land this in a bit:

msf5 exploit(linux/local/apport_abrt_chroot_priv_esc) > run

[*] Started reverse TCP handler on 172.16.249.1:4445 
[*] Writing '/tmp/.1KI5rW' (64812 bytes) ...
[*] Writing '/tmp/.LlwvX' (207 bytes) ...
[*] Launching exploit...
[*] Sending stage (985320 bytes) to 172.16.249.135
[*] Meterpreter session 3 opened (172.16.249.1:4445 -> 172.16.249.135:58425) at 2019-04-29 13:51:36 -0500

meterpreter > 

[wchen-r7]

Release Notes

This updates the apport_abrt_chroot_priv_esc module to be more in-line with current Linux LPE modules through code style changes and using new libs.