Eric Andreychek wrote:
Now here is where I run into a snag. Since my goal is to limit resources for all users and processes, I attempted to set the limits in /rcfs/taskclass/shares. Somewhat arbitrarily, I chose 50 as the limit for each of the options mentioned in there. I got the impression from a post on the mailing list that 50 meant percent -- but be it 50% of the available resources, or 50 processes, either should be perfect for my needs.
For the numtasks controller (which will do the fork bomb limiting you're looking for), 50% of available resources is still too many.
If you see /rcfs/taskclass/stats, one of the cnt_* fields shows that 131072 tasks constitutes the "systemwide resource".
Could you try the following:
-Change the total_guarantee field in /rcfs/taskclass/shares to 131072
This will make the denominator for any child's shares to be the same as the systemwide absolute number of resources so any share setting can be directly interpreted as the number of tasks that the class can have
-Set the guarantee and limit fields of /rcfs/taskclass/A to 10 or some low number.
-start a bash shell and echo its pid to /rcfs/taskclass/A/target
-verify the pid is in /rcfs/taskclass/A/members
-launch a fork bomb in that shell
We had run the fork bomb limiting successfully earlier.
Alas, after enabling that, a bash fork bomb still brought down the server just as quickly as without CKRM on the system.
So, I think I may be missing something. Are there additional steps I need to be taking to make this work? Did I skip over something?
Once this works, I'll be making the box it's running on available on the
net, so people will be able to see how SELinux + CKRM work.
So do you automatically create CKRM classes for SELinux protection domains ? That'd be interesting...
-- Shailabh
-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now. http://productguide.itmanagersjournal.com/
_______________________________________________
ckrm-tech mailing list
https://lists.sourceforge.net/lists/listinfo/ckrm-tech
