Daily Shaarli

All links of one day in a single page.

November 11, 2014

Restricting process CPU usage using nice, cpulimit, and cgroups

The Linux kernel is an incredible circus performer, carefully juggling many processes and their resource needs to keep your server humming along. The kernel is also all about equity: when there is competition for resources, the kernel tries to distribute those resources fairly.

However, what if you've got an important process that needs priority? What about a low-priority process? Or what about limiting resources for a group of a processes?

SSLH avec NGINX (SSL+SSH sur le même port 443) – memo-linux.com
From 0-day to exploit – Buffer overflow in Belkin N750 (CVE-2014-1635) | INTEGRITY Labs

A vulnerability in the guest network web interface of the Belkin N750 DB Wi-Fi Dual-Band N+ Gigabit Router with firmware F9K1103_WW_1.10.16m, allows an unauthenticated remote attacker to gain root access to the operating system of the affected device. The guest network functionality is default functionality and is delivered over an unprotected wifi network.

Successful exploitation of the vulnerability enables the attacker to gain full control of the affected router.