freebsd security - May 2014 - Local Denial of Service: logger(1)

I can't have been the first person to to have thought of this...  can I?

=========================================================================#!/bin/sh

while (1)
    dd if=/dev/random bs=15 count=1 | od -c | xargs logger
end
=========================================================================
Ought to fill up the /var partition in due course.

And perhaps more importantly, once it does, all manner of nefarious
activities, perpetrated by all manner of miscreants, might ensue, 
none of which would be logged in any way.

In message <2091.1401074804 at server1.tristatelogic.com>, I wrote:
>=========================================================================>#!/bin/sh
>
>while (1)
>    dd if=/dev/random bs=15 count=1 | od -c | xargs logger
>end
>=========================================================================
DUH!

I forgot that newsyslog(8) should limit the size of /var/log/messages, and
that as long as you limit the size of that to a reasnable value, and as
long as you have newsyslog(8) only keeping a finite & reasonable number
of "rotated out" copies, then /var won't fill up.

My apologies to everyone for the distraction.