RE: [Full-Disclosure] Re: bzip2 bombs still causes problems in antivirus-software

[Steve Wray <steve.wray@paradise.net.nz>]

> Dr. Peter Bieringer
> 
> Steve Wray schreibt: 
> 
> > It would probably be a good idea to implement ulimit
> > restrictions on the user that the software runs as.
> 
> Mostly "root"...and this will cause sure other fun, looks 
> like some software didn't expect that file system runs out-of-space
and still 
> hang and have no fail-safe mechanism here... 

If your antivirus software (which, by definition, is routinely exposed
to 'malware') runs as root, then you have worse potential issues than
just a bzip bomb consuming resources.


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html