bugtraq - Re: Sun M-class hardware denial of service

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Mon, 29 Sep 2008 11:31:39 +0930
From: Brett Lymn <blymn@...systems.com.au>
To: Theo de Raadt <deraadt@....openbsd.org>
Cc: Brett Lymn <blymn@...systems.com.au>,
	Florian Weimer <fw@...eb.enyo.de>,
	B 650 <dunc.on.usenet@...glemail.com>, bugtraq@...urityfocus.com
Subject: Re: Sun M-class hardware denial of service

On Sun, Sep 28, 2008 at 07:53:11PM -0600, Theo de Raadt wrote:
> 
> Apparently you just plain can't understand simple english.
> 

and apparently you cannot read the whole message - I said "too bad if
OpenBSD cannot do this"...

> If you put someone running OpenBSD into a zone, and that zone locks up
> completely and cannot be reset because of a flaw Sun has now admitted,
> then if you NEED that zone back, you have to power the machine down.
> 

are you talking hardware zone or a Solaris zone?  You are being sloppy
with your terminology.

> If you don't understand that, you must be really really stupid.
>

Here we go again - any time anyone disagrees with you they are too
stupid to see.  Sorry, I don't buy it.  You are just trying to beat
something up.
 
> 
> You want to talk about trust?  The entire idea is that you could
> TRUST the zones to do their job.
>  

Do you have any evidence to the contrary that a solaris zone cannot
prevent random kernel modules being loaded?  If you don't then you are
just spreading FUD.

-- 
Brett Lymn
"Warning:
The information contained in this email and any attached files is
confidential to BAE Systems Australia. If you are not the intended
recipient, any use, disclosure or copying of this email or any
attachments is expressly prohibited.  If you have received this email
in error, please notify us immediately. VIRUS: Every care has been
taken to ensure this email and its attachments are virus free,
however, any loss or damage incurred in using this email is not the
sender's responsibility.  It is your responsibility to ensure virus
checks are completed before installing any data sent in this email to
your computer."