However by default all users are able to use syslog through /dev/log so like I explained in my post about linux social engineering it’s possible to write to a file that’s not owned by a certain user and this can bypass the quota protection. With the program below an attacker can flood the log servers and do one of two things: 1) completely disable the log system if the log files are in a different partition than the rest of the operating system; 2) completely wreak all programs that need to write to disk if the log files are in the same partition as the operating system.
Hata hivyo kwa default watumiaji wote ni uwezo wa kutumia njia ya Dev syslog / / logi hivyo kama nilivyoeleza katika post yangu kuhusu linux kijamii uhandisi inawezekana kuandika kwenye faili hilo siyo inayomilikiwa na baadhi ya mtumiaji na hii inaweza bypass ulinzi wa viti maalum. Na mpango wa chini ya mshambulizi anaweza mafuriko servrar logi na kufanya moja ya mambo mawili: 1) mfumo wa afya kabisa logi kama files logi ni katika kuhesabu mbalimbali ya mapumziko ya mfumo wa uendeshaji; 2) wreak kabisa mipango yote haja ya kuandika kwa disk kama files logi ni katika kuhesabu sawa na mfumo wa uendeshaji.