From owner-svn-src-head@FreeBSD.ORG Wed Dec 19 10:57:47 2012 Return-Path: Delivered-To: svn-src-head@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 84BF45E2 for ; Wed, 19 Dec 2012 10:57:47 +0000 (UTC) (envelope-from andrey@zonov.org) Received: from mail-lb0-f171.google.com (mail-lb0-f171.google.com [209.85.217.171]) by mx1.freebsd.org (Postfix) with ESMTP id E5A748FC0C for ; Wed, 19 Dec 2012 10:57:46 +0000 (UTC) Received: by mail-lb0-f171.google.com with SMTP id gf7so1603885lbb.16 for ; Wed, 19 Dec 2012 02:57:40 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=x-received:sender:message-id:date:from:user-agent:mime-version:to :cc:subject:references:in-reply-to:x-enigmail-version:content-type :x-gm-message-state; bh=IVY24jEWDuF5FcTA64wu2xVa86byTxp+m6WqvNgWjoI=; b=d3uWGahHyMqsEFRoP8PXxk+l72GaPKqWv4zl84c+KjOMx0SPrZParmWaDjWF3SqdQZ UAQzmwydZ8haKseSi6znjReCbLKTFP61q/zXTgm06S3sUn4I/00cZH2CTwW6EcvuMZ9j fv/N1PEXdZO3Ix0gyao1CaaXthvgKJ/zpkReO5xIt9AaerFn8jIWpyRdBsF9g9UUidnv IOybFRc117+Jm7rP1bNkKMBtwWZwo+6e2/3geanUThiso06Yfpixb0LBScwOyRjH5S5w laGPyP54v7FBp/KUg7ZZJwm7uVMrTJ1MDyGP7ILbKgAJAOFWhnezkCawA9ZgsJqqkjEL FsLw== X-Received: by 10.152.134.243 with SMTP id pn19mr4863211lab.11.1355914660510; Wed, 19 Dec 2012 02:57:40 -0800 (PST) Received: from dhcp170-82-red.yandex.net (dhcp170-82-red.yandex.net. [95.108.170.82]) by mx.google.com with ESMTPS id b3sm1978426lbl.0.2012.12.19.02.57.38 (version=SSLv3 cipher=OTHER); Wed, 19 Dec 2012 02:57:39 -0800 (PST) Sender: Andrey Zonov Message-ID: <50D19D9D.9090200@FreeBSD.org> Date: Wed, 19 Dec 2012 14:57:33 +0400 From: Andrey Zonov User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: Robert Watson Subject: Re: svn commit: r244383 - head/etc References: <201212180727.qBI7Rp0t084371@svn.freebsd.org> In-Reply-To: X-Enigmail-Version: 1.4.6 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="------------enig0F7929E2F39FA333DA5C6F30" X-Gm-Message-State: ALoCoQm2l8T1Y4kCxupvTA34dftt606tkCRd+YDoIBxn2Nf8LE715CTiCUJyRzi15no8fWUK5kp5 Cc: svn-src-head@freebsd.org, svn-src-all@freebsd.org, src-committers@freebsd.org X-BeenThere: svn-src-head@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: SVN commit messages for the src tree for head/-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Dec 2012 10:57:47 -0000 This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enig0F7929E2F39FA333DA5C6F30 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable On 12/18/12 1:51 PM, Robert Watson wrote: >=20 > On Tue, 18 Dec 2012, Robert Watson wrote: >=20 >>> Log: >>> - Set memorylocked limit to 64Kb for default login class. >>> This prevents unprivileged users to lock too much memory. >>> - Set memorylocked limit to 64Mb for daemon login class. >>> Some daemons such as amd(8) and watchdogd(8) calls mlockall(2) on >>> startup, they are run from init(8) which uses daemon login class. >>> - Set memorylocked limit to unlimited for root login class. >>> >>> Suggested by: avg >>> Approved by: kib (mentor) >>> MFC after: 1 week >> >> I think you should not MFC this one quickly -- let's wait for it to >> shake out in the -CURRENT userbase for a few months to see what >> breaks. I wouldn't be surprised if a fair number of applications >> (both publicly available, and local at various FreeBSD-using shops) >> are implicitly depending on their not being limits to memorylocked by >> default. After an upgrade, they might find that their applications >> simply stop working for potentially hard-to-debug reasons. >> >> Or we might find no one notices -- but deferring an MFC will help give= >> us a better sense of which outcome is more likely. >=20 > ... or maybe this doesn't matter before your later sysctl commit? >=20 Yes. This change should not hurt anybody, because I change defaults for vm.old_mlock and security.bsd.unprivileged_mlock for stable. --=20 Andrey Zonov --------------enig0F7929E2F39FA333DA5C6F30 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.18 (Darwin) Comment: GPGTools - http://gpgtools.org iQEcBAEBAgAGBQJQ0Z2gAAoJEBWLemxX/CvTgWAH/1BhjAiSlNbpy9+le2VB6n2j wQqIlTsHGL/6WXDWIxYu2LYE+zMYHgPYE9JeD6Ok08VsE9JvfPNoCM8kL+QIrmtm /AWL16/XnJkeuAVsJnxJd30xg96ebnv5pTnCi0uVj1k5K7eFLCAgzrOqK7Yde2Am 31/267mQcgZtVYDmkwfWcCtdXBKgzSg2BxXmCdtbeYuOaxrF9nAkV9+aO6W21Vdx TV8Sufd+ZU+Q7KWCDMMRFsSSzFj0+KKrLrUiRgjUeQypRplz1GPnAyFdHkswG1CT aya4HuvuMptuXMoEKZ05JKOILd6KxBrk1CPyUsLr3nJvfn/tXpXqPNei1tt8iVA= =JR93 -----END PGP SIGNATURE----- --------------enig0F7929E2F39FA333DA5C6F30--