[prev in list] [next in list] [prev in thread] [next in thread] 

List:       fedora-devel-list
Subject:    Re: Layering an IDS on Linux - prepwork
From:       Alan Cox <alan () redhat ! com>
Date:       2007-08-05 20:06:50
Message-ID: 20070805200650.GA19004 () devserv ! devel ! redhat ! com
[Download RAW message or body]

On Sun, Aug 05, 2007 at 04:31:48PM +0200, Miloslav Trmac wrote:
> Repeated SIGABRT terminations might indicate an ongoing DoS attack, but
> isolated SIGABRT terminations need to be ignored, IMHO.

They probably want logging. You only need one attack. But you want to
log an abort/core dump of any system service/process anyway - because it
shouldn't be aborting and the dumb will be good gdb food

Alan

-- 
fedora-devel-list mailing list
fedora-devel-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-devel-list
[prev in list] [next in list] [prev in thread] [next in thread]