Boston Linux & UNIX was originally founded in 1994 as part of The Boston Computer Society. We meet on the third Wednesday of each month at the Massachusetts Institute of Technology, in Building E51.

BLU Discuss list archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Discuss] automatic daemon restarts

On Tue, Sep 16, 2014 at 11:42:51AM +0000, Edward Ned Harvey (blu) wrote:
> I would rather receive notification that a production service was
> *restarted* rather than *is down*
> Richard wants to say that's stupid.  I not only disagree, I think
> Richard's position is insulting and ignorantly one-sided.

1. An attacker of your site is able to exploit a vulnerability to
   upload a custom malicous loadable module for your managed service,
   but can not otherwise gain access to a shell or the filesystem.

2. The same attacker is also able to exploit a separate bug to cause
   the server to crash.

3. If that service is compromised, it could potentially cost your
   company millions of dollars in lost revenues and/or law suits.

Should the server automatically restart?

Can you ever really rule out #1 and #2?

Derek D. Martin   GPG Key ID: 0xDFBEAD02
This message is posted from an invalid address.  Replying to it will result in
undeliverable mail due to spam prevention.  Sorry for the inconvenience.

BLU is a member of BostonUserGroups
BLU is a member of BostonUserGroups
We also thank MIT for the use of their facilities.

Valid HTML 4.01! Valid CSS!

Boston Linux & Unix /