Re: Sun M-class hardware denial of service

[Theo de Raadt <deraadt () cvs openbsd org>]

> On Sun, Sep 28, 2008 at 08:14:16AM -0600, Theo de Raadt wrote:
> > the only workaround is to buy a seperate machine for the other uses.
>
> No.
>
> > So you buy a machine that can be split up into different machines, and
> > guess what, you still have to buy extra ones because it doesn't
> > work.
>
> Unless you misstated the exploit vector in your original message then
> locking untrusted people into a zone will work.  I can't help it if
> you don't understand the implications of doing this.

Apparently you just plain can't understand simple english.

If you put someone running OpenBSD into a zone, and that zone locks up
completely and cannot be reset because of a flaw Sun has now admitted,
then if you NEED that zone back, you have to power the machine down.

If you don't understand that, you must be really really stupid.

Trust?

You want to talk about trust?  The entire idea is that you could
TRUST the zones to do their job.