From owner-freebsd-security Fri Mar 16 19:16:15 2001 Delivered-To: freebsd-security@freebsd.org Received: from mail.gmx.net (pop.gmx.net [194.221.183.20]) by hub.freebsd.org (Postfix) with SMTP id 4BE9B37B718 for ; Fri, 16 Mar 2001 19:16:13 -0800 (PST) (envelope-from Gerhard.Sittig@gmx.net) Received: (qmail 10588 invoked by uid 0); 17 Mar 2001 03:16:11 -0000 Received: from pd950868c.dip.t-dialin.net (HELO speedy.gsinet) (217.80.134.140) by mail.gmx.net (mp020-rz3) with SMTP; 17 Mar 2001 03:16:11 -0000 Received: (from sittig@localhost) by speedy.gsinet (8.8.8/8.8.8) id VAA28585 for freebsd-security@FreeBSD.ORG; Fri, 16 Mar 2001 21:37:16 +0100 Date: Fri, 16 Mar 2001 21:37:16 +0100 From: Gerhard Sittig To: freebsd-security@FreeBSD.ORG Subject: Re: Multiple vendors FTP denial of service Message-ID: <20010316213716.D20830@speedy.gsinet> Mail-Followup-To: freebsd-security@FreeBSD.ORG References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0i In-Reply-To: ; from pherman@frenchfries.net on Fri, Mar 16, 2001 at 07:34:22PM +0100 Organization: System Defenestrators Inc. Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Fri, Mar 16, 2001 at 19:34 +0100, Paul Herman wrote: > > To bad a setusercontext() call couldn't be easily implimented > inside of set[e]uid() (it's in -lutil not -lc). I see too many > FreeBSD admins that believe that their proftpds and qmails are > protected by the limits set in /etc/login.conf. Well, the latter is recommended to be wrapped up in a softlimit(1) invocation. And the former - as well as any other program - could be treated the same. If login.conf isn't easily applied one is still free to make use of ports/sysutils/daemontools. virtually yours 82D1 9B9C 01DC 4FB4 D7B4 61BE 3F49 4F77 72DE DA76 Gerhard Sittig true | mail -s "get gpg key" Gerhard.Sittig@gmx.net -- If you don't understand or are scared by any of the above ask your parents or an adult to help you. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message