Re: [PATCH] Reserve N process to root

From: David Newall
Date: Wed Oct 10 2007 - 01:44:20 EST


Gustavo Chain wrote:
El Wed, 10 Oct 2007 11:19:27 +0930
David Newall <david@xxxxxxxxxxxxxxx> escribiÃ:
Gustavo Chain wrote:
I think it's necessary to reserve some pids to the super user.
5 must be sufficient.
Why? (Sorry if I missed something.)

 To prevent a posible DoS ?

That was what I thought you had in mind; it protects from some kind of fork bomb, right? But it doesn't seem useful unless you guarantee having a process already running (with CAP_SYS_ADMIN) *before* the bomb goes off.

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/