Re: Advice on inetd Denial of Service Bug
Anthony Towns <aj@azure.humbug.org.au> wrote:
>
> Unfortunately I can't think of a reasonable way of checking for this
> in the preinst. The shell code I posted to the bug report works okay
> for testing, but it'll report existing connections that are perfectly
> reasonable, rather than just programs listening where they shouldn't be,
> so it's not particularly good for sticking in a preinst and randomly
> killing processes. It also depends on an optional package, which ain't
> good.
Surely you can check whether the process is inetd by looking up
/proc/pid/exe?
As to the dependency on fuser, hmm, now what's that thing called netstat(1)
which happens to be in your package and also happens to have a flag called
-p? :)
--
Debian GNU/Linux 2.1 is out! ( http://www.debian.org/ )
Email: Herbert Xu ~{PmV>HI~} <herbert@gondor.apana.org.au>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt
Reply to: