From owner-freebsd-current@FreeBSD.ORG Mon Feb 16 06:04:16 2004 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7E84A16A4CF; Mon, 16 Feb 2004 06:04:16 -0800 (PST) Received: from milla.ask33.net (milla.ask33.net [217.197.166.60]) by mx1.FreeBSD.org (Postfix) with ESMTP id 049EB43D1F; Mon, 16 Feb 2004 06:04:16 -0800 (PST) (envelope-from nick@milla.ask33.net) Received: by milla.ask33.net (Postfix, from userid 1001) id AB2613ABB83; Mon, 16 Feb 2004 15:07:20 +0100 (CET) Date: Mon, 16 Feb 2004 15:07:20 +0100 From: Pawel Jakub Dawidek To: Maxim Konovalov Message-ID: <20040216140720.GE14639@garage.freebsd.pl> References: <200402151714.26631.freebsd-current@webteckies.org> <20040215191756.P49729@news1.macomnet.ru> <20040216133617.GD14639@garage.freebsd.pl> <20040216164605.S19111@news1.macomnet.ru> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="vZRzFRtr9HMcP32e" Content-Disposition: inline In-Reply-To: <20040216164605.S19111@news1.macomnet.ru> X-PGP-Key-URL: http://people.freebsd.org/~pjd/pjd.asc X-OS: FreeBSD 4.8-RELEASE-p13 i386 X-URL: http://garage.freebsd.pl User-Agent: Mutt/1.5.1i cc: scottl@FreeBSD.org cc: rwatson@FreeBSD.org cc: current@FreeBSD.org Subject: Re: Jails that keep hanging around X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 16 Feb 2004 14:04:16 -0000 --vZRzFRtr9HMcP32e Content-Type: text/plain; charset=iso-8859-2 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, Feb 16, 2004 at 04:47:25PM +0300, Maxim Konovalov wrote: +> > If there is no objections I'm going to commit it tomorrow. +>=20 +> What I really do not understand why we do not leak in non-jail +> environment? I'm sure we are, this is just hard to check, because we don't have list with allocated 'cred' structures. But try to do your test without a jail and track 2nd column in: # sysctl kern.malloc | grep cred Number of objects grows when I'm killing daemon while connection exists. I'm wondering if this cannot be used to some DoS attack. --=20 Pawel Jakub Dawidek http://www.FreeBSD.org pjd@FreeBSD.org http://garage.freebsd.pl FreeBSD committer Am I Evil? Yes, I Am! --vZRzFRtr9HMcP32e Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.7 (FreeBSD) iD8DBQFAMM6YForvXbEpPzQRAi3jAJ0WNABRpMNwdDJIb8lsSN3BCe0TDwCgw/3N dDMbuK+aq12aU8HvNfRquX4= =6gDP -----END PGP SIGNATURE----- --vZRzFRtr9HMcP32e--