3 ms·
You could simple do a DoS attack with a local user using a fork bomb too. It would be even shorter than the command showed in this post blog. So while this is
by m45t3r 10y ago
You could simple do a DoS attack with a local user using a fork bomb too. It would be even shorter than the command showed in this post blog.
So while this is a bug, the author is overreacting just to make systemd look bad.
- rascul 10y agoyour fork bomb can be mitigated with ulimit
- m45t3r 10y agoI am not saying that this is not a bug, just that this isn't the problem that the author is making. If you have local access, you probably can do other things if your only objective is to do a DoS.
- reactor4 10y agoYour point is covered in the article. "If you think systemd doesn't need privilege separation because it only parses messages from local users, keep in mind that in the Internet era, local attacks tend to acquire remote vectors. Consider Shellshock, or the presentation at this year's systemd conference which is titled "Talking to systemd from a Web Browser.""