On Wed, Jul 26, 2006 at 05:08:54PM +0200, Mathias Feiler wrote: > On Wed, 26 Jul 2006, Jose Calhariz wrote: > > |On Fri, Jul 21, 2006 at 11:32:24PM -0700, Caskey L. Dickson wrote: > |> > |> You have created a cycle in your filesystem tree. Unix tools assume > |> that the structure of the file system is a tree in the ADT sense, namely > |> an acyclic directed graph. (Thus the default prohibition of making hard > |> links to directories.) > |> > |> The path /afs/cell/dir/new_cells/cell/dir/new_cells/cell... produces an > |> infinitely deep tree. > | > |I know that was my mistake. > | > |My problem is why the openafs modules consumed all the free RAM on > |the client? Don't the openafs client or the modules have protections > |in place to prevent following infinity cycles in the path? > | > |Can it be possible for a normal user to create this kind of infinity > |cycles in the path? And this way to cause a DoS on a multi-user > |server that is client of AFS? > > A kinde of YES! > > My colleague injected this one > http://rt.central.org/rt/index.html?q=+36195 > (He just passed me the link, so don't blame me.) > > Which actually "substitudes/simulates" the infinitiv directory loop. > Linux 2.6 with Openafs 1.4 crashes, while Linux 2.4 or with Openafs 1.2.* > does not. > > On the other hand , user are allowd to mount volumes at their own..... >
Psst. Don't tell it to my users :-)
José Calhariz
--
Devo, não pago. Nego enquanto puder.
signature.asc
Description: Digital signature
