From: Szakacsits Szabolcs <szaka@sienet.hu>
To: stoffel@lucent.com
Cc: Robert Love <rml@tech9.net>,
linux-mm@kvack.org, linux-kernel@vger.kernel.org
Subject: Re: [PATCH] strict VM overcommit for stock 2.4
Date: Fri, 19 Jul 2002 07:52:49 +0200 (MEST) [thread overview]
Message-ID: <Pine.LNX.4.30.0207190708260.30902-100000@divine.city.tvnet.hu> (raw)
In-Reply-To: <15671.5657.312779.438143@gargle.gargle.HOWL>
On Thu, 18 Jul 2002 stoffel@lucent.com wrote:
> Szakacsits> About 99% of the people don't know about, don't understand
> Szakacsits> or don't care about resource limits. But they do care
> Szakacsits> about cleaning up when mess comes. Adding reserved root
> Szakacsits> memory would be a couple of lines
>
> So what does this buy you when root itself runs the box into the
> ground? Or if a dumb user decides to run his process as root, and it
> takes down the system?
You would be able to point out them running stuffs as root is the
worst scenario from security and reliability point of view. You can
argue about security now but not reliability because it doesn't matter
who owns the "runaway" processes, the end result is either uncontrolled
process killing (default kernel) or livelock (strict overcommit patch).
You can't solve everybody's problems of course but you can educate
them however at present the kernel misses the features to do so [and
for a moment *please* ignore the resource control/accounting with all
its benefits and deficients on Linux, there are lot's of way to do
resource control and Linux is quite infant at present].
> You're arguing for the wrong thing here.
How about consulting with some Sun or ex-Dec engineers why they have
this feature for (internet) decades? Because at default they use
strict overcommit and that's shooting yourself in the foot without
reserved root vm on a general purposes system.
Szaka
--
To unsubscribe, send a message with 'unsubscribe linux-mm' in
the body to majordomo@kvack.org. For more info on Linux MM,
see: http://www.linux-mm.org/
next prev parent reply other threads:[~2002-07-19 5:52 UTC|newest]
Thread overview: 37+ messages / expand[flat|nested] mbox.gz Atom feed top
2002-07-11 22:28 [PATCH] strict VM overcommit Robert Love
2002-07-12 17:30 ` [PATCH] strict VM overcommit for stock 2.4 Robert Love
2002-07-18 15:22 ` Szakacsits Szabolcs
2002-07-18 16:31 ` Robert Love
2002-07-18 16:36 ` Szakacsits Szabolcs
2002-07-18 17:42 ` Robert Love
2002-07-18 17:25 ` Szakacsits Szabolcs
2002-07-18 17:31 ` Szakacsits Szabolcs
2002-07-18 18:32 ` Robert Love
2002-07-18 19:58 ` Alan Cox
2002-07-18 18:01 ` Szakacsits Szabolcs
2002-07-18 18:52 ` Robert Love
2002-07-18 20:52 ` Alan Cox
2002-07-19 6:17 ` Szakacsits Szabolcs
2002-07-18 22:22 ` Rik van Riel
2002-07-19 7:47 ` Szakacsits Szabolcs
2002-07-18 18:28 ` Robert Love
2002-07-18 17:50 ` Szakacsits Szabolcs
2002-07-18 19:25 ` stoffel
2002-07-19 5:52 ` Szakacsits Szabolcs [this message]
2002-07-18 18:56 ` Richard B. Johnson
2002-07-18 19:03 ` Robert Love
2002-07-18 19:19 ` Richard B. Johnson
2002-07-18 19:22 ` Robert Love
2002-07-18 20:49 ` Alan Cox
2002-07-19 16:49 ` Amit Shah
2002-07-19 17:16 ` Robert Love
2002-07-20 5:02 ` Amit Shah
2002-07-18 19:10 ` Robert Love
2002-07-18 19:35 ` Richard B. Johnson
2002-07-18 19:41 ` Daniel Gryniewicz
2002-07-18 20:23 ` Richard B. Johnson
2002-07-18 20:43 ` Daniel Gryniewicz
2002-07-19 7:30 ` Szakacsits Szabolcs
2002-07-19 18:06 ` Robert Love
2002-07-18 22:24 ` Rik van Riel
2002-07-18 22:30 ` Robert Love
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=Pine.LNX.4.30.0207190708260.30902-100000@divine.city.tvnet.hu \
--to=szaka@sienet.hu \
--cc=linux-kernel@vger.kernel.org \
--cc=linux-mm@kvack.org \
--cc=rml@tech9.net \
--cc=stoffel@lucent.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox