[lkml]   [2002]   [Jan]   [10]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: Simple local DOS
    On Thu, 10 Jan 2002, David Balazic wrote:

    > I didn't do it on purpose to lock up my system and risk FS corruption
    > durin unclean reboot. I was interested in the server output and " 2>&1 | less"
    > is the logical way to do that.
    > I could also "solve" this problem by not running linux. And I can "solve" all
    > gcc bugs by not using gcc. Those are not solutions. Not to me at least.

    It's not Linux-specific, but will ALWAYS happen when you use one program
    that eats all your input and pipe its output into another program that
    waits for your input.

    What and when do you think you will eat when you feed your dog the
    sausage you want to eat yourself?

    > > output into interactive programs. tail -f is a viable workaround -- and
    > tail -f ? what is the difference between :
    > $ X 2>&1 | tail -f
    > and
    > $ X

    That you're clueless.

    You'd do:

    X >/my/safe/tmp/dir/X.log 2>&1 & tail -f /my/safe/tmp/dir/X.log

    > > all this is off-topic on linux-kernel,
    > non-root user locked up the console code. console code is part of kernel.
    > it is a kernel topic.

    Nope. Non-root user has used setuid application and thus become root.
    Drop setuid privileges and use xdm/kdm/gdm if you're to avoid this.

    > My own dumbness ? Did you also say that ping-of-death is not a problem ?

    Ping-of-death is a kernel bug or correctness issue or whatever you call
    it. This is not. root gave away the privilege to redirect console input
    by installing a setuid-application, X, XFree86, Xwrapper, whatever it
    may be called.

    And now please take this off the list.
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to
    More majordomo info at
    Please read the FAQ at

     \ /
      Last update: 2005-03-22 13:15    [W:0.029 / U:15.356 seconds]
    ©2003-2017 Jasper Spaans. hosted at Digital OceanAdvertise on this site