Date: Wed, 17 Mar 1999 14:53:19 +0300 (MSK) From: Dmitry Valdov <dv@dv.ru> To: Jay Tribick <netadmin@fastnet.co.uk> Cc: freebsd-current@FreeBSD.ORG, freebsd-security@FreeBSD.ORG Subject: Re: disk quota overriding Message-ID: <Pine.BSF.3.95q.990317145032.18648B-100000@xkis.kis.ru> In-Reply-To: <19990317114932.Z21466@bofh.fastnet.co.uk>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, 17 Mar 1999, Jay Tribick wrote:
> Date: Wed, 17 Mar 1999 11:49:32 +0000
> From: Jay Tribick <netadmin@fastnet.co.uk>
> To: Dmitry Valdov <dv@dv.ru>
> Cc: freebsd-current@FreeBSD.ORG, freebsd-security@FreeBSD.ORG
> Subject: Re: disk quota overriding
>
> Hi
>
> > There is a way to overflow / filesystem even is quota is enabled.
> >
> > Just make many hard links (for example /bin/sh) to /tmp/
> >
> > for ($q=0;$q<100000;$q++){
> > system ("ln /bin/sh /tmp/ln$q");
> > }
> >
> > Because /tmp directory usually owned by root that why quotas has no effect.
> > *Directory* size of /tmp can be grown up to available space on / filesystem.
> >
> > Any way to fix it?
>
> Haven't tested this, but are you sure it fills the filesystem up -
> all a hard link is, is a file with the same inode as the
> original file (correct me if I'm wrong) - therefore it
> doesn't actually use any space other than that required
> to store the file entry.
^^^^^^^^^^^^^^^^^^^^^
Yes. But /tmp dir is under root filesystem. So *directory* size of /tmp can be
grown up to free space on /. Which will result 0 bytes free on / :) All
available space will be used to store directory entries.
Dmitry.
PS. Sorry for my english.
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.95q.990317145032.18648B-100000>