I've seen some people saying that user-limits are an essential part of a
secure system to prevent local DoS attacks. Given that, should
a system call like 'fork' return -EPERM if the user has reached their
limit?
My local manpage (SuSE 7.2 system) says this under fork:
ERRORS
EAGAIN fork cannot allocate sufficient memory to copy the
parent's page tables and allocate a task structure
for the child.
-----
Should the man page be updated to reflect that EAGAIN is returned
when the user has reached their limit? From a user-monitoring point
of view, it might be security relevant to know if a EAGAIN is being
returned because the system really is low on resources or if it
is a user hitting their limit.
-- The above thoughts and | I know I don't know the opinions writings are my own. | of every part of my company. :-) L A Walsh, law at sgi.com | Sr Eng, Trust Technology 01-650-933-5338 | Core Linux, SGI- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
This archive was generated by hypermail 2b29 : Sat Jun 30 2001 - 21:00:12 EST