Commit 29c64424 authored by Simon McVittie's avatar Simon McVittie

Log to syslog when auth_timeout drops an incomplete connection

This is a symptom of either a denial of service attack, or a
serious performance problem. Either way, sysadmins should know.

parent 34e5fdee
...@@ -860,6 +860,14 @@ bus_connections_expire_incomplete (BusConnections *connections) ...@@ -860,6 +860,14 @@ bus_connections_expire_incomplete (BusConnections *connections)
if (elapsed >= (double) auth_timeout) if (elapsed >= (double) auth_timeout)
{ {
/* Unfortunately, we can't identify the connection: it doesn't
* have a unique name yet, we don't know its uid/pid yet,
* and so on. */
bus_context_log (connections->context, DBUS_SYSTEM_LOG_INFO,
"Connection has not authenticated soon enough, closing it "
"(auth_timeout=%dms, elapsed: %.0fms)",
auth_timeout, elapsed);
_dbus_verbose ("Timing out authentication for connection %p\n", connection); _dbus_verbose ("Timing out authentication for connection %p\n", connection);
dbus_connection_close (connection); dbus_connection_close (connection);
} }
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment