similar to: Denial of service.

Hi, I''ve been thinking about group membership and the corresponding (weak) restrictions to system resources. Consider the following: % cat > gsh.c main() { system("/bin/sh"); } % cc -o gsh gsh.c % id uid=100(joe) gid=500(users) groups=14(floppy),15(sound) % chgrp sound gsh % chmod g+s gsh % mail abuser Subject: You owe me $5...

Hi, I''ve been writing a login application to utilize the features of both PAM and libpwdb. Not surprisingly, this has meant looking at some old code.. The following denial of service attack seems to work quite nicely on my ancient Red Hat 3.0.3 system with the standard login application. Perhaps this is not a problem with 4.0? Does anyone know about other distributions? joe$ nvi

Hi, I'm writing an application with C under Linux and I'm trying to use the flock system function to lock a file of an NT4 Server over Samba. The problem is that the lock works well within the same machine but if it is a process on another machine (the same program) the one that tries to access the locked file, the process is not blocked until the lock is released but given full access

Attached another test program. I don't expect it to print any errors with any OS, but I'd like to confirm it for non-Linux SMP kernels. (Except for OpenBSD, it doesn't work correctly in it anyway because it doesn't support mixing write()s and mmap()) -------------- next part -------------- A non-text attachment was scrubbed... Name: concurrency.c Type: text/x-csrc Size: 2256

Let me know when you''ve got the cvs repo labeled -- I''m already to go to build the 0.4.0 installer for Windows. Curt

Resent to the list since I didn't think you would mind. Kevin wrote: > Eric, > > I have been using your vm outcall script for some time and it has worked > well. Thanks for your efforts. > > I am trying to re-install and I can't seem to get a call file generated. > I have set up postfix and in the log it appears that it pipes the > message to the vmoutcall

Hi, OpenSSH 7.8p1 is almost ready for release, so we would appreciate testing on as many platforms and systems as possible. This is a bugfix release. Snapshot releases for portable OpenSSH are available from http://www.mindrot.org/openssh_snap/ The OpenBSD version is available in CVS HEAD: http://www.openbsd.org/anoncvs.html Portable OpenSSH is also available via git using the instructions at

Hi, OpenSSH 7.9p1 is almost ready for release, so we would appreciate testing on as many platforms and systems as possible. This is a bugfix release. Snapshot releases for portable OpenSSH are available from http://www.mindrot.org/openssh_snap/ The OpenBSD version is available in CVS HEAD: http://www.openbsd.org/anoncvs.html Portable OpenSSH is also available via git using the instructions at

While doing migration, sometimes found suspend lock file was not unlinked in previous operations, then there is an obsolete lock file in place, which causes the current and later migration cannot get lock. That happens seldomly but do happen. After checking the source code, I found there are some places that potentially cause lock file unlinked, including: 1) in lock_suspend_event() function,

Since I upgraded to FreeBSD 4.8 (from 4.5) I've noticed occasional failures of nvi. It will suddenly die as a key is pressed, emitting: Error: input: Resource temporarily unavailable and you are staring at your command prompt. I googled for this message and found that people here and there have been complaining of this since about FreeBSD 4.2, but that absolutely none of them have received

I was wondering if there's any non-executable stack patch for FreeBSD's kernel. I searched in google but all I got was some questions in freebsd-security back from 2001 and an answer saying someone heard about a project like this, but no information at all. Is there any patch like PaX or Openwall available for FreeBSD? I dont want to discuss if its useless or not since there're a

On 06/22/2020 05:21 PM, Pete Biggs wrote: >> I have googled without finding the answer but how do I make sure >> /all/ processes use php72 rather than the default 54 in CentOS 7? >> Surely there must be a better way than overwriting /usr/bin/php. What >> have I forgotten to do? >> > You can't/shouldn't do that. The point of the Enterprise OS is that >

On Thu, 2018-04-19 at 07:59 -0500, Valeri Galtsev wrote: > Aha, now I understand what you want. It probably doesn't exist on master > repository server. You can re-master DVD from two of them or from a copy > of content of both in some directory on hard drive. Unsure how to remaster two DVDs, total 6GB?, onto a USB stick. I can copy both DVDs to a directory. To make the directory

On 06/22/2020 05:41 PM, Phoenix, Merka wrote: > ----Original Message----- > From: CentOS [mailto:centos-bounces at centos.org] On Behalf Of H > Sent: Monday, 22 June, 2020 14:31 > To: centos at centos.org > Subject: Re: [CentOS] Wrong version of php > >>> On 06/22/2020 05:21 PM, Pete Biggs wrote: >>> I have googled without finding the answer but how do I make

Hi, I have run into an issue using puppet in an ldap environment and I am wondering if anyone else has run into the same issue. A number of the puppet clients in my testing environment are failing to apply new configurations because the puppet client is getting an ldap error. Currently, I am attempting to push a new bash_profile to my home directory and then set my username/group to then own the

I have a set of data that is not normally distributed and for which I need to build a model. So, I tried the lrm function from the design-package. The first run went well, and I got the following results: Wald Statistics Response: RVCL2PROC.mott Factor Chi-Square d.f. P TTV.mott (Factor+Higher Order Factors) 69.01 4

I'm running rsync 2.5.6 on windows (via cygwin) and I've had other processes try to open the same files as rsync, but could not get through sometimes. Does rsync place a shared lock or an exclusive lock on the files it will copy from? I checked into the sources but did not find any use of flock() which could specify either LOCK_SH or LOCK_EX, so I'm not sure what the open() does when

One of the mbox files on my server causes dovecot to assert. I've caught the assert in gdb and have attached the backtrace. Unfortunatly my binary isn't built with debugging symbols, so I'm not sure how helpful it will be. smtp:/var$ uname -a Linux smtp 2.6.14-2-686-smp #1 SMP Sat Nov 26 13:37:07 UTC 2005 i686 GNU/Linux smtp:/var$ cat /etc/debian_version 3.1 smtp:/var$ dpkg -p

php-5.3.3-3.el6_2.6.x86_64 2.6.32-220.4.2.el6.x86_64 After some testing we moved our production PHP intranet site from an old server to a new CentOS 6.2 instance running the mentioned versions. At first it worked well and then user's started to experience a hung site. Upon some digging it appears that the PHP module is getting stuck in a race condition regarding the sessions file - [root at

Hi, When I tested the latest snapshot on FreeBSD 4.2, I noticed some implicit declaration warnings I didn't recall seeing on Linux. I think this is caused by the fact that if autoconf does detect the presence of some BSD capability, necessary header files and declarations may not be included (as these are assumed to be the same ~everywhere, and already included). If such capability is