max connections per control group (cgroup)

[Jon Watte]

A limit of connections per process sounds much better than a limit of
connections per cgroup to me. Some users build or use complex systems with
many dozens of collaborating programs, or just have a busy desktop. If the
session or cgroup limit is arbitrarily low, like 16, that will get in the
way of such uses pretty quickly. However, as each collaborating part is a
process, a quite low per-process per-bus connection could would be more
reasonable to this thinking.

Note that DoS-es from a malicious process on the machine aren't really
feasible, if we want to assume that a user is allowed to use all the
machine resources for legitimate purposes.

Sincerely,

jw






Sincerely,

Jon Watte


--
"I find that the harder I work, the more luck I seem to have." -- Thomas
Jefferson


On Wed, Aug 6, 2014 at 7:22 AM, Thiago Macieira <thiago at kde.org> wrote:

> On Wednesday 06 August 2014 15:16:27 Alban Crequy wrote:
> > Similarly, do you think a limit of connections per process would be good?
>
> Yes!
>
> --
> Thiago Macieira - thiago (AT) macieira.info - thiago (AT) kde.org
>    Software Architect - Intel Open Source Technology Center
>       PGP/GPG: 0x6EF45358; fingerprint:
>       E067 918B B660 DBD1 105C  966C 33F5 F005 6EF4 5358
>
> _______________________________________________
> dbus mailing list
> dbus at lists.freedesktop.org
> http://lists.freedesktop.org/mailman/listinfo/dbus
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/dbus/attachments/20140806/894fdca5/attachment.html>