Re: [OpenWrt-Devel] Security implications for consideration [Was: Re: [openwrt/openwrt] rpcd: add respawn param]

2020-03-04 Thread Florian Eckert
> > procd_open_instance > > procd_set_param command "$PROG" ${socket:+-s "$socket"} > > ${timeout:+-t "$timeout"} > > + procd_set_param respawn ${respawn_retry:-0} > > > > IMHO this is probably not correct as well, that respawn param is > "array" of > [threshold, timeout, retry] params, so

Re: [OpenWrt-Devel] Security implications for consideration [Was: Re: [openwrt/openwrt] rpcd: add respawn param]

2020-03-04 Thread Petr Štetiar
Mar 4, 2020 12:08:18 Florian Eckert : > Hi Petr > > thanks for your investigation > > > > I simply would like to bring one important aspect for consideration. > > > > By respawning any network facing service indefinitely we're giving > > adversary > > infinite attempts for figuring out the way

Re: [OpenWrt-Devel] Security implications for consideration [Was: Re: [openwrt/openwrt] rpcd: add respawn param]

2020-03-04 Thread Florian Eckert
Hi Petr thanks for your investigation I simply would like to bring one important aspect for consideration. By respawning any network facing service indefinitely we're giving adversary infinite attempts for figuring out the way in, decreasing the purpose of (expensive) ASLR etc. See

Re: [OpenWrt-Devel] Security implications for consideration [Was: Re: [openwrt/openwrt] rpcd: add respawn param]

2020-03-04 Thread Jo-Philipp Wich
Hi, > [...] feel free to revert it. ~ Jo signature.asc Description: OpenPGP digital signature ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel

[OpenWrt-Devel] Security implications for consideration [Was: Re: [openwrt/openwrt] rpcd: add respawn param]

2020-03-04 Thread Petr Štetiar
LEDE Commits [2020-03-04 03:17:06]: Hi, sorry for such late post-review :-), but I've somehow missed it previously (probably because of commit subject?), just noticed it now via content of Jo's commit email. > jow pushed a commit to openwrt/openwrt.git, branch openwrt-19.07: > Author: Florian