| |||||||||||||
RLIMIT_NPROC and setuid()RLIMIT_NPROC and setuid()Posted Jul 21, 2011 14:38 UTC (Thu) by tialaramex (subscriber, #21167)In reply to: RLIMIT_NPROC and setuid() by jake Parent article: RLIMIT_NPROC and setuid()
The classic example (the version I've seen is for a BSD, contrary to the comment at the top) is that a user comes in via SSH.
SSH creates a new process to handle the connection, authenticates the user, then setuid() to the user and execs the shell.
But if none of these steps enforce limits, the user can just SSH in as often as they like despite the administrator setting a limit.
(Log in to post comments)
|
|||||||||||||