Date: Wed, 17 Mar 1999 14:53:19 +0300 (MSK) From: Dmitry Valdov <dv@dv.ru> To: Jay Tribick <netadmin@fastnet.co.uk> Cc: freebsd-current@FreeBSD.ORG, freebsd-security@FreeBSD.ORG Subject: Re: disk quota overriding Message-ID: <Pine.BSF.3.95q.990317145032.18648B-100000@xkis.kis.ru> In-Reply-To: <19990317114932.Z21466@bofh.fastnet.co.uk>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, 17 Mar 1999, Jay Tribick wrote: > Date: Wed, 17 Mar 1999 11:49:32 +0000 > From: Jay Tribick <netadmin@fastnet.co.uk> > To: Dmitry Valdov <dv@dv.ru> > Cc: freebsd-current@FreeBSD.ORG, freebsd-security@FreeBSD.ORG > Subject: Re: disk quota overriding > > Hi > > > There is a way to overflow / filesystem even is quota is enabled. > > > > Just make many hard links (for example /bin/sh) to /tmp/ > > > > for ($q=0;$q<100000;$q++){ > > system ("ln /bin/sh /tmp/ln$q"); > > } > > > > Because /tmp directory usually owned by root that why quotas has no effect. > > *Directory* size of /tmp can be grown up to available space on / filesystem. > > > > Any way to fix it? > > Haven't tested this, but are you sure it fills the filesystem up - > all a hard link is, is a file with the same inode as the > original file (correct me if I'm wrong) - therefore it > doesn't actually use any space other than that required > to store the file entry. ^^^^^^^^^^^^^^^^^^^^^ Yes. But /tmp dir is under root filesystem. So *directory* size of /tmp can be grown up to free space on /. Which will result 0 bytes free on / :) All available space will be used to store directory entries. Dmitry. PS. Sorry for my english. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.95q.990317145032.18648B-100000>