Re: Sun M-class hardware denial of service

[Brett Lymn <blymn () baesystems com au>]

On Sun, Sep 28, 2008 at 08:14:16AM -0600, Theo de Raadt wrote:
> the only workaround is to buy a seperate machine for the other uses.

No.

> So you buy a machine that can be split up into different machines, and
> guess what, you still have to buy extra ones because it doesn't
> work.

Unless you misstated the exploit vector in your original message then
locking untrusted people into a zone will work.  I can't help it if
you don't understand the implications of doing this.

> You really do hold vendors to a really really low standard.

Not really - what I am not doing is trying to beat up a firmware
problem that whilst being quite bad can be mitigated by using native
features of Solaris.  Too bad if OpenBSD cannot do the same - I am not
really sure about the benefits of OpenBSD on that scale of hardware
anyway considering the lack of kernel threading and the parlous state
of userland threading.

-- 
Brett Lymn
"Warning:
The information contained in this email and any attached files is
confidential to BAE Systems Australia. If you are not the intended
recipient, any use, disclosure or copying of this email or any
attachments is expressly prohibited.  If you have received this email
in error, please notify us immediately. VIRUS: Every care has been
taken to ensure this email and its attachments are virus free,
however, any loss or damage incurred in using this email is not the
sender's responsibility.  It is your responsibility to ensure virus
checks are completed before installing any data sent in this email to
your computer."