max connections per control group (cgroup)

[Jon Watte]

>
> Note that DoS-es from a malicious process on the machine aren't really
> feasible


What I meant to say:

Note that *protecting against* DoS-es from a malicious process on the
machine isn't really feasible

Sincerely,

jw





Sincerely,

Jon Watte


--
"I find that the harder I work, the more luck I seem to have." -- Thomas
Jefferson


On Wed, Aug 6, 2014 at 8:49 AM, Jon Watte <jwatte at gmail.com> wrote:

> A limit of connections per process sounds much better than a limit of
> connections per cgroup to me. Some users build or use complex systems with
> many dozens of collaborating programs, or just have a busy desktop. If the
> session or cgroup limit is arbitrarily low, like 16, that will get in the
> way of such uses pretty quickly. However, as each collaborating part is a
> process, a quite low per-process per-bus connection could would be more
> reasonable to this thinking.
>
> Note that DoS-es from a malicious process on the machine aren't really
> feasible, if we want to assume that a user is allowed to use all the
> machine resources for legitimate purposes.
>
> Sincerely,
>
> jw
>
>
>
>
>
>
> Sincerely,
>
> Jon Watte
>
>
> --
> "I find that the harder I work, the more luck I seem to have." -- Thomas
> Jefferson
>
>
> On Wed, Aug 6, 2014 at 7:22 AM, Thiago Macieira <thiago at kde.org> wrote:
>
>> On Wednesday 06 August 2014 15:16:27 Alban Crequy wrote:
>> > Similarly, do you think a limit of connections per process would be
>> good?
>>
>> Yes!
>>
>> --
>> Thiago Macieira - thiago (AT) macieira.info - thiago (AT) kde.org
>>    Software Architect - Intel Open Source Technology Center
>>       PGP/GPG: 0x6EF45358; fingerprint:
>>       E067 918B B660 DBD1 105C  966C 33F5 F005 6EF4 5358
>>
>> _______________________________________________
>> dbus mailing list
>> dbus at lists.freedesktop.org
>> http://lists.freedesktop.org/mailman/listinfo/dbus
>>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/dbus/attachments/20140806/625cadcb/attachment.html>