Oh, and I can press Ctrl-C at any moment at a "sudo" prompt and try
again. (Depending on your POV that might be a bug in sudo, but
anyway.)
On 9/13/07, Bogdan Butnaru <email address hidden> wrote:
> No, but you can kill it's parent shell. You can do 'bash -c "sudo
> cmd"' and kill bash. On my attempts this killed the "sudo" after a
> single bad password. Sure, bash is a bit overweight and would slow
> things down, but you can emulate whatever happens there with less
> bloat. Or use dash, at the least.
>
> On 9/13/07, Martin Pitt <email address hidden> wrote:
> > > For most cases it's very simple to get around this by attempting a
> > password, killing the process after 100ms if it doesn't answer and
> > retrying.
> >
> > This does not actually work, since as an user you are not allowed to
> > kill a suid root process. So you can only fork processes like hell,
> > which is bound by nproc.
> >
> > I still think that this is a sensible security measure.
> >
> > --
> > Annoying and useless delays on password entry errors
> > https://bugs.launchpad.net/bugs/138654
> > You received this bug notification because you are a direct subscriber
> > of the bug.
> >
>
>
> --
> Bogdan Butnaru — <email address hidden>
> "I think I am a fallen star, I should wish on myself." – O.
>
--
Bogdan Butnaru — <email address hidden>
"I think I am a fallen star, I should wish on myself." – O.
Oh, and I can press Ctrl-C at any moment at a "sudo" prompt and try
again. (Depending on your POV that might be a bug in sudo, but
anyway.)
On 9/13/07, Bogdan Butnaru <email address hidden> wrote: /bugs.launchpad .net/bugs/ 138654
> No, but you can kill it's parent shell. You can do 'bash -c "sudo
> cmd"' and kill bash. On my attempts this killed the "sudo" after a
> single bad password. Sure, bash is a bit overweight and would slow
> things down, but you can emulate whatever happens there with less
> bloat. Or use dash, at the least.
>
> On 9/13/07, Martin Pitt <email address hidden> wrote:
> > > For most cases it's very simple to get around this by attempting a
> > password, killing the process after 100ms if it doesn't answer and
> > retrying.
> >
> > This does not actually work, since as an user you are not allowed to
> > kill a suid root process. So you can only fork processes like hell,
> > which is bound by nproc.
> >
> > I still think that this is a sensible security measure.
> >
> > --
> > Annoying and useless delays on password entry errors
> > https:/
> > You received this bug notification because you are a direct subscriber
> > of the bug.
> >
>
>
> --
> Bogdan Butnaru — <email address hidden>
> "I think I am a fallen star, I should wish on myself." – O.
>
--
Bogdan Butnaru — <email address hidden>
"I think I am a fallen star, I should wish on myself." – O.