Re: slapper countermeasures
KevinL <email@example.com> writes:
> On Wed, 2002-09-18 at 06:05, Michael Renzmann wrote:
> > "killall .bugtraq" would be suitable as well, and it would "destroy"
> > every other instance of the program that is running currently. Even if
> > detecting the current PPID does not work for whatever reason.
> Solaris is vulnerable to this bug? Solaris "killall" kills _everything_
> - not just the named process.
Not everything - just any process with an open filedescriptor.
> (Who knows this from bitter experience...)
Me, too. Brought down one of our production servers hard...
Learned that lesson! ;-)
Ullrich Jans Eichenstrasse 4
Tel: +49 89 74427834 82024 Taufkirchen
Usenet: firstname.lastname@example.org RealUlli@IRC