Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email email@example.com
Re: hard links on Linux create local DoS vulnerability and security problems
From: Brian Bennett (bahamatdigitalelf.net)
Date: Mon Nov 24 2003 - 12:20:50 CST
On Mon, Nov 24, 2003 at 05:36:29PM +0100, Jakob Lell wrote:
> on Linux it is possible for any user to create a hard link to a file belonging
> to another user. This hard link continues to exist even if the original file
> is removed by the owner. However, as the link still belongs to the original
> owner, it is still counted to his quota. If a malicious user creates hard
> links for every temp file created by another user, this can make the victim
> run out of quota (or even fill up the hard disk). This makes a local DoS
> attack possible.
Hard links can only be created on the same device (i.e., you can't create
a hardlink to a file residing on a different partition). This in itself
will prevent any type of attack. Anybody who uses the same partition for
/home and / on a production multi-user system is asking for trouble.
As for users creating hardlinks to other users' files, a simple find -uid
will locate any offending files for quota purposes. If there's a concern
about users reading other users' files, well that's what permission modes
It is also notable, that Linux behaves identically to Solaris in this regard.
Not that Solaris is perfect, but it's been in use long enough that if current
security was inadequate this would have been dealt with some time ago.
It is undignified for a woman to play servant to a man who is not hers.
-- Spock, "Amok Time", stardate 3372.7
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)
-----END PGP SIGNATURE-----