DOS by unprivileged user

From: Ferry Toth
Date: Thu Apr 19 2018 - 15:26:44 EST


It appears any ordinary user can easily create a DOS on linux.

One sure way to reproduce this is to open gitk on the linux kernel repo
(SIC) on a machine with 8GB RAM 16 GB swap on a HDD with btrfs and quad core
+ hyperthreading. But I will be easy enough to get the same effect with more
RAM, other fs etc.

In this case gitk allocates more and more memory (until my system freezes
6.5GB of 7.5GB avaiable), the system starts swapping or writing to tmp files
(can't investigate as there is no time until it freezes) and the io wait
goes to 100% on all cores. At this point it is impossible to login from
remote and local keyboard and mouse are frozen. Hard reset is the only way
out at this point.

IMHO there is something wrong in how the kernel hands out resources, in this
case memory, CPU time and disk accesses. It should be easily measurable that
a single application is allocating all memory and consequently all CPU time
is spent in io wait. I'm pretty sure that if the kernel would stop or reduce
allocating CPU time to the hogging (user) process causing excessive io wait,
the machine would continue just fine. And probably a single process should
not even be allowed to allocate this amount of memory. Or at least should
not force other applications to get swapped out.

In effect gitk should have beeb forced to run slow or be killed off (which
doesn't happen because probably the kernel itself doesn't receive enough CPU
time).

As a positive side effect maybe someone would dig into gitk and make it less
memory hungry (qgit is half as hungry, still a lot).

--
Ferry Toth