[lkml]   [2010]   [Feb]   [3]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: Improving OOM killer
    On 02/03/2010 07:05 PM, David Rientjes wrote:
    > On Wed, 3 Feb 2010, Lubos Lunak wrote:

    >>> /* Forkbombs get penalized 10% of available RAM */
    >>> if (forkcount> 500)
    >>> points += 100;

    > Do you have any comments about the forkbomb detector or its threshold that
    > I've put in my heuristic? I think detecting these scenarios is still an
    > important issue that we need to address instead of simply removing it from
    > consideration entirely.

    I believe that malicious users are best addressed in person,
    or preemptively through cgroups and rlimits.

    Having a process with over 500 children is quite possible
    with things like apache, Oracle, postgres and other forking

    Killing the parent process can result in the service
    becoming unavailable, and in some cases even data

    All rights reversed.

     \ /
      Last update: 2010-02-04 01:21    [W:0.020 / U:2.936 seconds]
    ©2003-2017 Jasper Spaans. hosted at Digital OceanAdvertise on this site