Re: [cobalt-security] Re: cobalt-security digest (tmpwatch DoS)

[Gossi The Dog <gossi@xxxxxxxxxxxxxx>]

On Sat, 9 Sep 2000, H.P. Stroebel wrote:

<snip>

> i don`t know if on the raq write access to the /tmp directories is
> needed for normal users; on other boxes i have them writeable only for
> root.

This would break things that use /tmp - f.e. vi.

My 0.2p is that although any user with locale access can normally still
break a system, its still stupid behaviour on the part of this program.

Having said that, with proper use of process and resource limits it is
easily possible to stop things like fork bombs.

Rgds,
Gossi.