Authentication failure rate limiting (was: Security Working Group)

Joseph Reynolds jrey at linux.ibm.com
Fri May 1 11:52:11 AEST 2020


On 4/30/20 3:05 PM, Joseph Reynolds wrote:
> On 4/28/20 11:12 AM, Joseph Reynolds wrote:
>> 5. Rate-limit BMCWeb authentication failures.
>
> The concept was favorably received, with lots of questions about 
> details. TODO: Joseph will push a BMCWeb patch with a proof of concept.

Done.  See https://gerrit.openbmc-project.xyz/c/openbmc/bmcweb/+/31841

- Joseph



More information about the openbmc mailing list