Re: [RFC PATCH] sys_membarrier(): system/process-wide memory barrier (x86) (v12)

[Steven Rostedt]

On Mon, 16 Mar 2015 15:19:39 +0100
Peter Zijlstra <peterz@xxxxxxxxxxxxx> wrote:

> 
> I suppose this is an unprivileged syscall; so what do we do about:
> 
> 	for (;;)
> 		sys_membar(EXPEDITED);
> 
> Which would spray the entire system with IPIs at break neck speed.

Perhaps it should be rate limited. Have parameters (controlled via
sysctl) that will only allow so many of these per ms. If it exceeds it,
then the call will end up being a schedule_timeout() till it is allowed
to continue. Thus, the above will spit out a few hundred IPIs, then
sleep for a millisecond, and then spit out another hundred IPIs and
sleep again.

That would prevent any DoS attacks.

-- Steve
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/