Re: Local system security

2011-01-05 Thread Pete Zaitcev
On Wed, 05 Jan 2011 16:13:25 -0500 Adam Jackson wrote: > But prevention of DoS on the part of local actors is just not a game you > can win. If nothing else, remember that the way Linux implements > malloc() assumes you have infinite memory, which means you overcommit > resources, which means fa

Re: Local system security

2011-01-05 Thread Matt McCutchen
On Wed, 2011-01-05 at 16:13 -0500, Adam Jackson wrote: > On Wed, 2011-01-05 at 14:10 -0500, Matt McCutchen wrote: > > On Wed, 2011-01-05 at 11:12 -0500, Adam Jackson wrote: > > > (And of course what we're doing here is protecting against a malicious > > > attacker who already has enough privileges

Re: Local system security

2011-01-05 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/05/2011 04:38 PM, Gregory Maxwell wrote: > On Wed, Jan 5, 2011 at 4:13 PM, Adam Jackson wrote: >> But prevention of DoS on the part of local actors is just not a game you >> can win. If nothing else, remember that the way Linux implements >> ma

Re: Local system security

2011-01-05 Thread Gregory Maxwell
On Wed, Jan 5, 2011 at 4:13 PM, Adam Jackson wrote: > But prevention of DoS on the part of local actors is just not a game you > can win.  If nothing else, remember that the way Linux implements > malloc() assumes you have infinite memory, which means you overcommit > resources, which means failur

Re: Local system security

2011-01-05 Thread Adam Jackson
On Wed, 2011-01-05 at 14:10 -0500, Matt McCutchen wrote: > On Wed, 2011-01-05 at 11:12 -0500, Adam Jackson wrote: > > (And of course what we're doing here is protecting against a malicious > > attacker who already has enough privileges to run code on your system, > > which means you're pretty far i