Messages in this thread | | | Date | Tue, 13 Jan 2009 13:47:20 +0000 | From | Alan Cox <> | Subject | Re: Linux killed Kenny, bastard! |
| |
> (i.e., shell support, PAM support in /etc/securitylimits.conf); all > that would need to be done is to teach a few userspace > programs/libraries about the new resource limit.
You don't even need that - just define the behaviour of oom_adj to inherit.
Of course thats still often totally the wrong behaviour as you'll find out when a key system service is started up by a client that wants to use it that was run by some low privilege untrusted process with tight resource limits.
For desktop Jim Gettys proposed a very simple and quite elegant use of this sort of thing which was to let the window manager do some of the work according to what hadn't been used for ages.
| |