PTY DOS vulnerability?
Seems to me that a pty ulimit and making sure that root can always access an unused pty on demand are separate issues.
The ulimit is the same issue that it is for open files, disk quota, aggregate per-user memory utilization, etc, maintaining the "multi-user" aspect of system usability.
Making sure that root has the tools to do what is needed in a pty resource exhaustion situation deserves perhaps a different mechanism, like dynamic, on-demand pty device creation for root (which seems to me more robust than a "reserved for root" mechanism, which allows the possibility that root processes have already used up that many ptys when root needs one in an emergency).
Regards,
Clayton Weaver
<mailto: [email protected]>
PS: Linux Golf Howto addenda
Long grass: when hitting out of long grass,
the grass tends to wrap around the heel of the club, where the club face meets the club shaft, without offering comparable resistance to the
toe of the club face. This tends to close the
club face and deliver it to the ball at not
quite the intended angle. Solution: tilt the
toe of the club away from the ball a few
degrees before gripping the club. Soft,
well-watered green grass a few inches long
needs less opening of the club face than
foot long dry grass (more fiber in stems
than leaves) to accomplish the necessary
adjustment.
Signature · 6 lines
__________________________________________________________ Sign-up for your own FREE Personalized E-mail at Mail.com http://www.mail.com/?sr=signup CareerBuilder.com has over 400,000 jobs. Be smarter about your job search http://corp.mail.com/careers
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
onsdag 9. juli 2003, 01:11, skrev Clayton Weaver:
Quoted 9 lines
Seems to me that a pty ulimit and making sure that root can always access an unused pty on demand are separate issues.
The ulimit is the same issue that it is for open files, disk quota, aggregate per-user memory utilization, etc, maintaining the "multi-user" aspect of system usability.
Quoted 9 lines
Making sure that root has the tools to do what is needed in a pty resource exhaustion situation deserves perhaps a different mechanism, like dynamic, on-demand pty device creation for root (which seems to me more robust than a "reserved for root" mechanism, which allows the possibility that root processes have already used up that many ptys when root needs one in an emergency).
But if you're going to do that for root, then why not do it for all users? That would avoid the problem altogether, after all...
- - Svein Ove Aas
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)
iD8DBQE/C+mH9OlFkai3rMARAvlIAKCuBSdCx31kgcMP8hFaEx3qkdWiZwCfUI0A YSDkrEFpFnmIkzXUi1E7Tnw=
=Hmkz
-----END PGP SIGNATURE-----