Re: Fw: Anonymous Qmail Denial of Service

[Peter van Dijk]

On Mon, Jan 04, 1999 at 01:03:14PM +0000, Sam wrote:
> 
> > : :    % /var/qmail/bin/qmail-queue
> > : :    ^Z
> > : :    Suspended
> > : :    % kill -9 %1
> > : :    [1]    Killed                 /var/qmail/bin/qmail-queue
> > : :    %
> > : :
> > : :There will be one more zero-length file, owned by qmail, without
> > : :any user identification whatsoever.  It is an exercise for the
> 
> qmail-queue is a setuid program.  Did UNIX change, while I was out of town,
> and you can now send signals to processes of different userids?

If you started it, yes. Nothing has changed. Otherwise, you couldn't ctrl-C
out of anything SUID.. that would be bad. On the other hand, not allowing
users to send signal to those processes has a lot of advantages too.. like
security.

Greetz, Peter.
-- 
<squeezer> AND I AM GONNA KILL MIKE                |          Peter van Dijk
<squeezer> hardbeat, als je nog nuchter bent:      | [EMAIL PROTECTED]
<squeezer>   @date = localtime(time);              |  realtime security d00d
<squeezer>   $date[5] += 2000 if ($date[5] < 37);  | 
<squeezer>   $date[5] += 1900 if ($date[5] < 99);  |    -x- available -x-