From owner-freebsd-security  Sun Jul 26 04:48:00 1998
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id EAA15847
          for freebsd-security-outgoing; Sun, 26 Jul 1998 04:48:00 -0700 (PDT)
          (envelope-from owner-freebsd-security@FreeBSD.ORG)
Received: from indigo.ie (nsmart@ts03-040.dublin.indigo.ie [194.125.148.50])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id EAA15836
          for <freebsd-security@FreeBSD.ORG>; Sun, 26 Jul 1998 04:47:57 -0700 (PDT)
          (envelope-from rotel@indigo.ie)
Received: (from nsmart@localhost)
	by indigo.ie (8.8.8/8.8.7) id MAA00491;
	Sun, 26 Jul 1998 12:42:36 +0100 (IST)
	(envelope-from rotel@indigo.ie)
From: Niall Smart <rotel@indigo.ie>
Message-Id: <199807261142.MAA00491@indigo.ie>
Date: Sun, 26 Jul 1998 12:42:36 +0000
In-Reply-To: <Pine.SOL.3.96.980726201812.20876A-100000@banshee.cs.uow.edu.au>; Nicholas Charles Brawn <ncb05@uow.edu.au>
Reply-To: rotel@indigo.ie
X-Files: The truth is out there
X-Mailer: Mail User's Shell (7.2.6 beta(3) 11/17/96)
To: Nicholas Charles Brawn <ncb05@uow.edu.au>, freebsd-security@FreeBSD.ORG
Subject: Re: preventing fork bombs
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

On Jul 26,  8:25pm, Nicholas Charles Brawn wrote:
} Subject: preventing fork bombs
> The simple code used was:
> 
> #include <unistd.h>
> 
> main(void) {
> 	while(1) {
> 		fork();
> 	}
> }
> 
> The above effectively freezing my system. :\

As has been previously observed the system call frequency is so
high that this is still an effective DOS.  The solution is some
kind of system call rate limiting.

Niall

-- 
Niall Smart.        PGP: finger njs3@motmot.doc.ic.ac.uk
FreeBSD: Turning PC's into Workstations: www.freebsd.org

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe security" in the body of the message