lkml.org 
[lkml]   [1998]   [Jan]   [12]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
SubjectRe: inode->i_count security hole
Date
> PS I assume making inode->i_count a long works, because
>
> pages in address space * max processes << 2^32 (for ix86)

The actual maths is something like

2^32 bytes per process (actually less) 2^12 bytes/page = 2^20 pages per
process * a max of about 1024 processes. Its good to about 6000 processes.

Really we should also keep a limit on the vma's and pages mapped per process
(the latter btw is an rlimit)

Alan


\
 
 \ /
  Last update: 2005-03-22 13:41    [W:0.779 / U:0.180 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site