Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 10 Nov 1997 01:42:12 -0800 (PST)
From:      Julian Elischer <julian@whistle.com>
To:        Joerg Wunsch <joerg_wunsch@uriah.heep.sax.de>
Cc:        hackers@FreeBSD.ORG
Subject:   Re: How useful is this patch?
Message-ID:  <Pine.BSF.3.95.971110014016.6078C-100000@current1.whistle.com>
In-Reply-To: <19971110081446.UX03181@uriah.heep.sax.de>

next in thread | previous in thread | raw e-mail | index | archive | help


On Mon, 10 Nov 1997, J Wunsch wrote:

> As Archie Cobbs wrote:
> 
> > > Problem: you can cause someone else a DoS attack by maliciously
> > > filling his home directory.
> > 
> > This attack would require that you have given the other user write
> > permission to your home directory, at least.
> 
> ...or somewhere below your home directory.  But well, if you don't
> want this, what's the sense behind it at all? :-)
> 
We set up our servers with the home directory elsewhere..
the users can't get to it :)
and user never get to execute ANYTHONG (including a shell)
in fact I hope to mount that drive -noexec soon.






Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.95.971110014016.6078C-100000>