[1456] in linux-security and linux-alert archive
[linux-security] ssh and limits on resources
daemon@ATHENA.MIT.EDU (Trevor Johnson)
Sat Feb 22 11:40:45 1997
Date: Sat, 22 Feb 1997 00:36:11 -0800 (PST)
From: Trevor Johnson <trevor@blues.jpj.NET>
Reply-To: Trevor Johnson <trevor@blues.jpj.NET>
To: ssh-bugs@cs.hut.fi, linux-security@redhat.com
Resent-From: linux-security@redhat.com
While logging in via ssh (versions 1.2.17 and 1.2.12) under Linux 2.0, I
found that limits weren't being set (as shown by the output of "limit"
(tcsh) or "ulimit -a" (bash). Since /etc/profile, /etc/csh.cshrc, and
/etc/limits were ignored, I made /etc/sshrc and put "ulimit" statements in
it. However, I was unable to limit the number of processes this way,
leaving the system vulnerable to fork bombs. Installing lshell (available
at http://sunsite.unc.edu/pub/Linux/system/admin/login/lshell-2.01.tar.gz)
corrected the problem.
___
Trevor Johnson <trevor@jpj.net>
