On Wed, Nov 13, 2002 at 12:01:08PM -0800, Matthew Dillon wrote:
+>     Would people be interested if I added such a feature?  Limit the
+>     highest allocatable pty to 90% when operating within a jail?  e.g.
+>     if you have 256 ptys both jail and normal tend to allocate ptys 
+>     from the bottom up, but the jail would not be allowed to allocate
+>     past pty #227.  This way if a jail eats all the ptys the sysadmin
+>     can still ssh in.

First of all, there is no such limit in main system (not jailed),
so there is always chance to DoS Your machine in this way if You
have not-jailed users. So this isn't a complete solution.
But if there are no free ptys, I log in via:

        % ssh -vC <IP> /bin/sh

-- 
Pawel Jakub Dawidek
UNIX Systems Administrator
http://garage.freebsd.pl
Am I Evil? Yes, I Am.

Attachment: msg38115/pgp00000.pgp
Description: PGP signature

Reply via email to