Re: [Vserver] Denial of service issue

2006-06-14 Thread Herbert Poetzl
On Wed, Jun 14, 2006 at 11:45:42AM +0300, Nikolay Kichukov wrote: > Hi all, > I was follwoing the thread and if possible I would like someone to > elaborate on a few more points. > > Which is the version of the utils in developemnt that can resolve that > matter if dentry limits is applied? When w

Re: [Vserver] Denial of service issue

2006-06-14 Thread Nikolay Kichukov
Hi all, I was follwoing the thread and if possible I would like someone to elaborate on a few more points. Which is the version of the utils in developemnt that can resolve that matter if dentry limits is applied? When was this fix applied? How does the dentry limit work and how is it configured

Re: [Vserver] Denial of service issue

2006-06-13 Thread Russell Kliese
Thanks for all of your replies. I posted a reply on kerneltrap in case other people are interested in what is happening with this issue. Russell ___ Vserver mailing list Vserver@list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vser

Re: [Vserver] Denial of service issue

2006-06-13 Thread Herbert Poetzl
On Tue, Jun 13, 2006 at 09:16:48PM +1000, Russell Kliese wrote: > I was just reading an article on kernel trap that raised some issues about > linux-vservers: http://kerneltrap.org/node/6492 . > > In particular, the following denial of service attack from within a > vserver seemed worrying because

Re: [Vserver] Denial of service issue

2006-06-13 Thread Christian Heim
On Tuesday 13 June 2006 11:26, Guenther Fuchs wrote: >This is not "only" a vserver DoS attack as far as I understood, this >is a general Linux issue I guess. Yup, it is also a Mainline issue. -- Christian Heim <[EMAIL PROTECTED]> Gentoo Linux Developer - vserver/openvz pgpyRmkAesWEA.pgp Descri

Re: [Vserver] Denial of service issue

2006-06-13 Thread Guenther Fuchs
Hi there, on Tuesday, June 13, 2006 at 1:16:48 PM there was posted: RK> Is there work being done to prevent such DoS attacks? Yes, on his "linuxtage" task Herbert mentioned this already beeing fixed (minimum in development release) through "directory" limits to be set on guest configurations (He

[Vserver] Denial of service issue

2006-06-13 Thread Russell Kliese
I was just reading an article on kernel trap that raised some issues about linux-vservers: http://kerneltrap.org/node/6492 . In particular, the following denial of service attack from within a vserver seemed worrying because of it's simplicity. > run a program doing `mkdir("aaa"); chdir("aaa");'