Re: Patch related with Fork Bombing Atack

2007-06-05 Thread Anand Jahagirdar
Hello All I am forwarding one more improved patch related with fork bombing attack. I have used printk_ratelimit function in my patch and it works rellly well. it prints message as per printk_ratelimit values stored in /proc/sys/kernel/printk_ratelimit and /proc/sys/kernel/printk_rateli

Re: Patch related with Fork Bombing Atack

2007-06-04 Thread Daniel Hazelton
On Monday 04 June 2007 10:58:41 Jiri Kosina wrote: > On Mon, 4 Jun 2007, Anand Jahagirdar wrote: > >I am forwarding one improved patch related with Fork Bombing > > Attack. This patch prints a message (only once) which alerts > > administrator/root user about fork bombing attack. I crea

Re: Patch related with Fork Bombing Atack

2007-06-04 Thread Jiri Kosina
On Mon, 4 Jun 2007, Anand Jahagirdar wrote: >I am forwarding one improved patch related with Fork Bombing > Attack. This patch prints a message (only once) which alerts > administrator/root user about fork bombing attack. I created this patch > to implement my idea of informing admi

Re: Patch related with Fork Bombing Atack

2007-06-04 Thread Anand Jahagirdar
Hello All I am forwarding one improved patch related with Fork Bombing Attack. This patch prints a message (only once) which alerts administrator/root user about fork bombing attack. I created this patch to implement my idea of informing administrator about fork bombing attack on his ma

Re: Patch related with Fork Bombing Atack

2007-06-03 Thread Daniel Hazelton
On Sunday 03 June 2007 19:01:21 Nix wrote: > On 1 Jun 2007, Jens Axboe told this: > > I think Anand is assuming that because syslog may coalesce identical > > messages into "repeated foo times" in the messages file, that it's not a > > dos. That is of course wrong. > > Not all syslog daemons do tha

Re: Patch related with Fork Bombing Atack

2007-06-03 Thread Nix
On 1 Jun 2007, Jens Axboe told this: > I think Anand is assuming that because syslog may coalesce identical > messages into "repeated foo times" in the messages file, that it's not a > dos. That is of course wrong. Not all syslog daemons do that, anyway. (syslog-ng doesn't, for one.) -- `On a sc

Re: Patch related with Fork Bombing Atack

2007-06-01 Thread Anand Jahagirdar
Hello All I totally agree with all of you, but my idea behind this patch is that administrator/root user must be able to know that there is fork bombing attack on his machine and he should be able take action agianst that particular user and kill all his processes. can anybody ple

Re: Patch related with Fork Bombing Atack

2007-06-01 Thread Jiri Kosina
On Fri, 1 Jun 2007, Anand Jahagirdar wrote: > when they try to flood the syslog using fork bombing attack, their > messge will be printed only once in syslog and it will show how many > times it has repeated. due to this he will not able to flood the > syslog.and i am using only one single

Re: Patch related with Fork Bombing Atack

2007-06-01 Thread Jens Axboe
On Fri, Jun 01 2007, Daniel Hazelton wrote: > On Friday 01 June 2007 03:30:20 Jens Axboe wrote: > > On Fri, Jun 01 2007, Daniel Hazelton wrote: > > > On Friday 01 June 2007 02:48:59 Anand Jahagirdar wrote: > > > > On 5/31/07, Jens Axboe <[EMAIL PROTECTED]> wrote: > > > > > On Thu, May 31 2007, Anan

Re: Patch related with Fork Bombing Atack

2007-06-01 Thread Daniel Hazelton
On Friday 01 June 2007 03:30:20 Jens Axboe wrote: > On Fri, Jun 01 2007, Daniel Hazelton wrote: > > On Friday 01 June 2007 02:48:59 Anand Jahagirdar wrote: > > > On 5/31/07, Jens Axboe <[EMAIL PROTECTED]> wrote: > > > > On Thu, May 31 2007, Anand Jahagirdar wrote: > > > > > 2) Printk message in my

Re: Patch related with Fork Bombing Atack

2007-06-01 Thread Jens Axboe
On Fri, Jun 01 2007, Daniel Hazelton wrote: > On Friday 01 June 2007 02:48:59 Anand Jahagirdar wrote: > > On 5/31/07, Jens Axboe <[EMAIL PROTECTED]> wrote: > > > On Thu, May 31 2007, Anand Jahagirdar wrote: > > > > 2) Printk message in my patch will definitely help Administrator/Root > > > > User t

Re: Patch related with Fork Bombing Atack

2007-06-01 Thread Daniel Hazelton
On Friday 01 June 2007 02:48:59 Anand Jahagirdar wrote: > On 5/31/07, Jens Axboe <[EMAIL PROTECTED]> wrote: > > On Thu, May 31 2007, Anand Jahagirdar wrote: > > > 2) Printk message in my patch will definitely help Administrator/Root > > > User to detect which particular user is trying fork bombing

Re: Patch related with Fork Bombing Atack

2007-05-31 Thread Anand Jahagirdar
On 5/31/07, Jens Axboe <[EMAIL PROTECTED]> wrote: On Thu, May 31 2007, Anand Jahagirdar wrote: > 2) Printk message in my patch will definitely help Administrator/Root > User to detect which particular user is trying fork bombing attack on > his machine by looking at /var/log/messages or dmesg . h

Re: Patch related with Fork Bombing Atack

2007-05-31 Thread Jens Axboe
On Thu, May 31 2007, Anand Jahagirdar wrote: > 2) Printk message in my patch will definitely help Administrator/Root > User to detect which particular user is trying fork bombing attack on > his machine by looking at /var/log/messages or dmesg . he can take > action against that particular user and