Re: [PATCH v5 7/8] Documentation: Add documentation for the Brute LSM

From: Andi Kleen
Date: Thu Mar 11 2021 - 15:06:00 EST



<scenario that init will not be killed>

Thanks.

Okay but that means that the brute force attack can just continue
because the attacked daemon will be respawned?

You need some way to stop the respawning, otherwise the
mitigation doesn't work for daemons.


-Andi