Re: [PATCH] [RFC] Deter exploit bruteforcing

Jiri Kosina
2015-01-02T22:32:43Z

On Fri, 2 Jan 2015, Pavel Machek wrote:

> > > Can the slowdown be impelmented in glibc, then?
> >
> > glibc has a lot of asserts where it can detect stack smashing and kills the
> > current process using abort(). Here it could of course also call
> > sleep().
>
> Please do it in glibc, then.

You also want to protect against binaries that are evil on purpose, right?

There is no guarantee that those will calling the kernel through glibc at
all.

--
Jiri Kosina
SUSE Labs