Messages in this thread | | | Date | Sun, 18 Dec 2011 13:29:41 -0500 | From | KOSAKI Motohiro <> | Subject | Re: [resend][PATCH 1/3] mqueue: revert bump up DFLT_*MAX |
| |
(12/9/11 5:35 PM), kosaki.motohiro@gmail.com wrote: > From: KOSAKI Motohiro<kosaki.motohiro@jp.fujitsu.com> > > Mqueue limitation is slightly naieve parameter likes other ipcs > because unprivileged user can consume kernel memory by using ipcs. > > Thus, too aggressive raise bring us security issue. Example, > current setting allow evil unprivileged user use 256GB (= 256 > * 1024 * 1024*1024) and it's enough large to system will belome > unresponsive. Don't do that. > > Instead, every admin should adjust the knobs for their own systems. > > Signed-off-by: KOSAKI Motohiro<kosaki.motohiro@jp.fujitsu.com> > Acked-by: Doug Ledford<dledford@redhat.com> > Acked-by: Joe Korty<joe.korty@ccur.com> > Cc: Amerigo Wang<amwang@redhat.com> > Cc: Serge E. Hallyn<serue@us.ibm.com> > Cc: Jiri Slaby<jslaby@suse.cz>
Andrew, can you please pick up this series into your tree? because your tree have related Doug mqueue.
Thanks.
| |