[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: slapper countermeasures

KevinL <darius@obsidian.com.au> writes:

> On Wed, 2002-09-18 at 06:05, Michael Renzmann wrote:
> > "killall .bugtraq" would be suitable as well, and it would "destroy" 
> > every other instance of the program that is running currently. Even if 
> > detecting the current PPID does not work for whatever reason.
> *chuckle*

> Solaris is vulnerable to this bug?  Solaris "killall" kills _everything_
> - not just the named process.

Not everything - just any process with an open filedescriptor.

> (Who knows this from bitter experience...)

Me, too. Brought down one of our production servers hard... 

Learned that lesson! ;-)

Regards, Ulli

Ullrich Jans                           Eichenstrasse 4
Tel: +49 89 74427834                   82024 Taufkirchen
Usenet: ujans@ullisys.pond.sub.org     RealUlli@IRC

Reply to: