Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 22 Nov 2002 05:40:05 -0700
From:      "David G. Andersen" <danderse@cs.utah.edu>
To:        Mike Silbersack <silby@silby.com>, freebsd-security@freebsd.org
Subject:   Re: File table exhaustion patch
Message-ID:  <20021122054005.A13937@cs.utah.edu>
In-Reply-To: <20021122080515.GQ36738@starjuice.net>; from sheldonh@starjuice.net on Fri, Nov 22, 2002 at 10:05:15AM %2B0200
References:  <20021121105204.B75421@cs.utah.edu> <20021121152539.U44884-100000@patrocles.silby.com> <20021122080515.GQ36738@starjuice.net>

next in thread | previous in thread | raw e-mail | index | archive | help
Sheldon Hearn just mooed:
> On (2002/11/21 15:29), Mike Silbersack wrote:
> 
> > HOWEVER, we're in a code freeze leading up to 5.0-release, and local DoSes
> > aren't a critical bug.
> 
> Is that the official FreeBSD SO team viewpoint on local DoS
> vulnerabilities?

  Well, keep in mind that this isn't really a bad one - it doesn't
crash the machine, and it's moderately easy to identify the (l)user who's
doing it.  I've actually not seen this happen maliciously, I've only
seen it happen by accident with buggy research code, some of it mine.
It's annoying when it happens, but there are a million things a local
user can do to be annoying.

  -Dave

-- 
work: dga@lcs.mit.edu                          me:  dga@pobox.com
      MIT Laboratory for Computer Science           http://www.angio.net/
      I do not accept unsolicited commercial email.  Do not spam me.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20021122054005.A13937>