Messages in this thread | | | Date | Tue, 3 Aug 2004 19:07:30 -0700 | From | Chris Wright <> | Subject | Re: [patch] mlock-as-nonroot revisted |
| |
* Andrea Arcangeli (andrea@suse.de) wrote: > On Tue, Aug 03, 2004 at 09:21:34PM -0400, Rik van Riel wrote: > > This is exactly why named hugetlb files are NOT included > > in this accounting, only the ones created through the SHM > > interface are. > > but you're allowing everybody to alloc all RAM in hugetlb files with > the change in the previos patch posted by Arjan (you're currently posted > incremental patches against Arjan's patch at the top of the thread I > hope), so you must definitely apply "this" accounting to hugetlb files > too or it's still insecure as far as I can tell.
I think it's no different from current behaviour. Which for fs based allocations is only guarded by fsuid and max_huge_pages.
thanks, -chris -- Linux Security Modules http://lsm.immunix.org http://lsm.bkbits.net - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |