> Isn't this a huge problem for ordinary users on a system??  I mean
> there aren't any user restrictions on sockets right?  I imagine
> there will be some sort of follow up on this exploit?

Well, there is a 256k limit per socket of the buffer (I & O), try
sysctl kern.maxsockbuf and you can limit the number of sockets with
the maximum number of filedescriptors per process (ulimit -a), but that's
just not safe enough.

It seems that the kernel doesn't check wether the space it wants to
allocate still exists or not.

Marc


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-stable" in the body of the message

Reply via email to