Re: Stopping a DoS by patching aio calls in STABLE

[Cy Schubert - ITSD Open Systems Group]

In message <[EMAIL PROTECTED]>, Mike 
Tancsa wri
tes:
> 
> As a work around to preventing a local DoS in STABLE (PR 17152), it was
> suggested to me by Alfred Perlstein that I "patch [my] kernel to make all
> aio calls return ENOSYS".  Does anyone have any suggestions as how to do
> that ?  I have a shell server that I am a little worried about because of
> script kiddies :-(

Take a look at spy.  Though it only works under -CURRENT and won't 
solve your immediate problem, it's still a pretty neat concept.

Spy can be found at http://www.freebsd.org/~abial/spy-0.1.tgz and the 
manual can be found at http://www.freebsd.org/~sheldonh/spy.4.


Regards,                       Phone:  (250)387-8437
Cy Schubert                      Fax:  (250)387-5766
Team Leader, Sun/DEC Team   Internet:  [EMAIL PROTECTED]
Open Systems Group, ITSD, ISTA
Province of BC
                    "COBOL IS A WASTE OF CARDS."





To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-stable" in the body of the message