ksmbd: throttle session setup failures to avoid dictionary attacks
mainline inclusion from mainline-5.15-rc7 commit 621be84a category: feature bugzilla: https://gitee.com/openeuler/kernel/issues/I60T7G CVE: NA Reference: https://git.kernel.org/torvalds/linux/c/621be84a9d1f ------------------------------- To avoid dictionary attacks (repeated session setups rapidly sent) to connect to server, ksmbd make a delay of a 5 seconds on session setup failure to make it harder to send enough random connection requests to break into a server if a user insert the wrong password 10 times in a row. Signed-off-by:Namjae Jeon <linkinjeon@kernel.org> Signed-off-by:
Steve French <stfrench@microsoft.com> Signed-off-by:
Jason Yan <yanaijie@huawei.com> Signed-off-by:
Zhong Jinghua <zhongjinghua@huawei.com>
Loading
Please sign in to comment