| From | Sent On | Attachments |
|---|---|---|
| Dmitry Valdov | Mar 17, 1999 3:42 am | |
| Jay Tribick | Mar 17, 1999 3:49 am | |
| Fernando Schapachnik | Mar 17, 1999 3:50 am | |
| Dmitry Valdov | Mar 17, 1999 3:52 am | |
| Dmitry Valdov | Mar 17, 1999 3:55 am | |
| Dmitry Valdov | Mar 17, 1999 4:36 am | |
| Ladavac Marino | Mar 17, 1999 5:37 am | |
| Mikhail Teterin | Mar 17, 1999 5:43 am | |
| Dmitry Valdov | Mar 17, 1999 5:47 am | |
| Jon Hamilton | Mar 17, 1999 6:41 am | |
| Michael Richards | Mar 17, 1999 6:57 am | |
| Dan Tso | Mar 17, 1999 7:18 am | |
| James Wyatt | Mar 17, 1999 9:00 am | |
| James Wyatt | Mar 17, 1999 9:08 am | |
| Daniel C. Sobral | Mar 17, 1999 10:00 am | |
| Daniel C. Sobral | Mar 17, 1999 10:02 am | |
| mi...@seidata.com | Mar 17, 1999 12:14 pm | |
| David Scheidt | Mar 17, 1999 3:00 pm | |
| David H. Brierley | Mar 17, 1999 4:59 pm | |
| Rico Pajarola | Mar 17, 1999 7:00 pm | |
| Andrew McNaughton | Mar 18, 1999 4:43 am | |
| Daniel C. Sobral | Mar 18, 1999 5:58 am | |
| Robert Watson | Mar 18, 1999 6:23 am | |
| Timothy R. Platt | Mar 18, 1999 6:54 am | |
| Zahemszky Gabor | Mar 18, 1999 7:55 am | |
| James Wyatt | Mar 18, 1999 8:00 am | |
| sth...@nethelp.no | Mar 18, 1999 9:11 am | |
| James Wyatt | Mar 18, 1999 9:53 am | |
| Jon Hamilton | Mar 18, 1999 10:13 pm | |
| Julian Assange | Mar 24, 1999 10:34 pm |
| Subject: | Re: disk quota overriding | |
|---|---|---|
| From: | Dmitry Valdov (dv...@dv.ru) | |
| Date: | Mar 17, 1999 3:52:57 am | |
| List: | org.freebsd.freebsd-security | |
On Wed, 17 Mar 1999, Jay Tribick wrote:
Date: Wed, 17 Mar 1999 11:49:32 +0000 From: Jay Tribick <neta...@fastnet.co.uk> To: Dmitry Valdov <dv...@dv.ru> Cc: free...@FreeBSD.ORG, free...@FreeBSD.ORG Subject: Re: disk quota overriding
Hi
There is a way to overflow / filesystem even is quota is enabled.
Just make many hard links (for example /bin/sh) to /tmp/
for ($q=0;$q<100000;$q++){ system ("ln /bin/sh /tmp/ln$q"); }
Because /tmp directory usually owned by root that why quotas has no effect. *Directory* size of /tmp can be grown up to available space on / filesystem.
Any way to fix it?
Haven't tested this, but are you sure it fills the filesystem up - all a hard link is, is a file with the same inode as the original file (correct me if I'm wrong) - therefore it doesn't actually use any space other than that required to store the file entry.
^^^^^^^^^^^^^^^^^^^^^ Yes. But /tmp dir is under root filesystem. So *directory* size of /tmp can be grown up to free space on /. Which will result 0 bytes free on / :) All available space will be used to store directory entries.
Dmitry.
PS. Sorry for my english.
To Unsubscribe: send mail to majo...@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message





