You've already forked opencryptoki
mirror of
https://github.com/opencryptoki/opencryptoki.git
synced 2026-10-24 05:39:17 +03:00
8a252633d0
Accepting too many concurrent admin connections dramatically increases the risk of a denial-of-service attack. An malicious admin connection might flood the connection with events, which requires a huge amount of memory to pass these events to the applications. Especially when the events require a reply, then this can add up to a lot of memory, causing the pkcsslotd to run into out-of-memory situations. This might cause it to drop application connections, which can have bad effects. 32 concurrent admin connections should be more than enough at the moment. Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com>