Команда разработчиков OpenBSD в процессе портирования этой ОС на сервера Sun M-серии, обнаружила серьезную проблему, позволяющую пользователю с правами root на одном из доменов нарушить работу всей платформы:
During the porting of OpenBSD/sparc64 to this family of machines it
was discovered that the OS kernel can trigger a fault. This fault is
caught by the systems management controller (the XSCF, Fujitsu’s
version of LOM/RSC console) which then powers the domain down, marks
the mainboard in the chassis as faulty, and refuses to allow domains
relying on that mainboard to be started.To clarify, the OS kernel does not crash; no — the domain powers
down. Normally one uses commands in the XSCF to power domains on and
off. Those commands refuse to power up that domain again saying it
has faulted.To repair this problem one must phone a friendly Sun support team.
After providing them with the machine’s serial number, Sun will
dispatch an engineer with a generated series of codes that are valid
for a 48-hour period. These codes are used to generate a
one-time-password which enables a login to the service console within
the XSCF. The engineer then uses the service console to clear the
fault on the mainboard. That command then requires a POWERCYCLE OF
THE ENTIRE CHASSIS. This means any other domains running on the same
hardware must be shutdown to clear the fault generated in another
domain.
Подробности от Theo de Raadt: Sun M-class hardware denial of service
