Re: Linux kernels DoSable by file-max limit

2002-07-10 Thread Jim Breton
On Mon, Jul 08, 2002 at 09:30:34PM -0400, Michal Zalewski wrote: And they can still most likely bypass your limit by putting something smart in their .procmailrc / .forward / .qmail, or in so many other ways. One could use 'initscript' to plug many of those holes: INITSCRIPT(5) Linux System

Re: pam session

2001-06-24 Thread Jim Breton
On Tue, Jun 19, 2001 at 03:11:02AM +0200, Christian Kraemer wrote: This is espacially anoying if you use pam_limits.so to set rlimits. Every user could cirrcumvent them easily by calling ssh in this way: ssh user@server /bin/sh True. Fwiw you can work around this by putting ulimit calls in