Package: jenkins.debian.org

/cgi-bin/nph-logwatch basically just runs `tail -c +0 -f` to pass a log
in real time to apache.
That keeps an apache worker busy as long as the user has it connected,
and has tail take a while CPU for it for the whole duration of the
thing.

I.e., it's highly inefficient and causes us to be subject to DoS if
anybody wanted it.
For example, right now there are 6 such proceses running.  It really
means 6 busy vCPUs that can't do anything else.

We should find a better way to do it…

-- 
regards,
                        Mattia Rizzolo

GPG Key: 66AE 2B4A FCCF 3F52 DA18  4D18 4B04 3FCD B944 4540      .''`.
More about me:  https://mapreri.org                             : :'  :
Launchpad user: https://launchpad.net/~mapreri                  `. `'`
Debian QA page: https://qa.debian.org/developer.php?login=mattia  `-

Attachment: signature.asc
Description: PGP signature

Reply via email to