Bugtraq mailing list archives
Re: Sun M-class hardware denial of service
From: Brett Lymn <blymn () baesystems com au>
Date: Thu, 11 Sep 2008 11:46:47 +0930
On Wed, Sep 10, 2008 at 09:01:05PM +0200, Florian Weimer wrote:
How absolutely bizzare. Basically you spend half a million dollars on Sun hardware, and it isn't required to do this better than VMWare?I think you've got it exactly backwards: you don't let non-trusted people run code on these machines because they are so expensive.
Right, and even if you are forced to allow root access to someone who is not well trusted then run them in a zone on the hardware domain - that way they cannot load random kernel modules even if they have root in the zone. The bug is bad but there are workarounds available that make it very difficult to exploit. -- Brett Lymn "Warning: The information contained in this email and any attached files is confidential to BAE Systems Australia. If you are not the intended recipient, any use, disclosure or copying of this email or any attachments is expressly prohibited. If you have received this email in error, please notify us immediately. VIRUS: Every care has been taken to ensure this email and its attachments are virus free, however, any loss or damage incurred in using this email is not the sender's responsibility. It is your responsibility to ensure virus checks are completed before installing any data sent in this email to your computer."
Current thread:
- Sun M-class hardware denial of service Theo de Raadt (Sep 09)
- Message not available
- Re: Sun M-class hardware denial of service B 650 (Sep 09)
- Re: Sun M-class hardware denial of service terry white (Sep 10)
- Re: Sun M-class hardware denial of service B 650 (Sep 09)
- Message not available
- <Possible follow-ups>
- Re: Sun M-class hardware denial of service Theo de Raadt (Sep 09)
- Re: Sun M-class hardware denial of service B 650 (Sep 09)
- Re: Sun M-class hardware denial of service Theo de Raadt (Sep 09)
- RE: Sun M-class hardware denial of service Michael Wojcik (Sep 10)
- Re: Sun M-class hardware denial of service Micheal Patterson (Sep 10)
- Re: Sun M-class hardware denial of service Florian Weimer (Sep 10)
- Re: Sun M-class hardware denial of service Curtis Maloney (Sep 11)
- Message not available
- Re: Sun M-class hardware denial of service Brett Lymn (Sep 11)
- Message not available
- Re: Sun M-class hardware denial of service Brett Lymn (Sep 29)
- Re: Sun M-class hardware denial of service Theo de Raadt (Sep 29)
- Message not available
- Re: Sun M-class hardware denial of service Brett Lymn (Sep 29)
- Re: Sun M-class hardware denial of service Theo de Raadt (Sep 29)
- Message not available
- Re: Sun M-class hardware denial of service Brett Lymn (Sep 29)
- Re: Sun M-class hardware denial of service Theo de Raadt (Sep 29)
- Re: Sun M-class hardware denial of service Florian Weimer (Sep 29)
- Re: Sun M-class hardware denial of service Theo de Raadt (Sep 29)
- Re: Sun M-class hardware denial of service Florian Weimer (Sep 29)
- Re: Sun M-class hardware denial of service B 650 (Sep 09)
- Message not available
- Re: Sun M-class hardware denial of service Brett Lymn (Sep 29)