Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 27 Jan 2016 11:52:36 -0500
From:      Allan Jude <allanjude@freebsd.org>
To:        freebsd-hackers@freebsd.org
Subject:   Re: syslogd(8) with OOM Killer protection
Message-ID:  <56A8F5D4.2070901@freebsd.org>
In-Reply-To: <alpine.BSF.2.20.1601270932220.30320@wonkity.com>
References:  <CAOfEmZgzL2Ldu53CeSsKcUe00H1VAukhEopSUmpUK0=XAhsD1A@mail.gmail.com> <56A86D91.3040709@freebsd.org> <alpine.BSF.2.20.1601270932220.30320@wonkity.com>

next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--qrWDUXPvAWKPUkWs4FVaKV9hXetQoV6gN
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

On 2016-01-27 11:36, Warren Block wrote:
> On Wed, 27 Jan 2016, Allan Jude wrote:
>=20
>> On 2016-01-27 01:21, Marcelo Araujo wrote:
>>> Hi guys,
>>>
>>> I would like to know your opinion about this REVIEW[1].
>>> The basic idea is protect by default the syslogd(8) against been
>>> killed by
>>> OOM with an option to disable the protection.
>>>
>>> Some people like the idea, other people would prefer something more
>>> global
>>> where we can protect any daemon by the discretion of our choice.
>>>
>>> Thoughts?
>>>
>>>
>>> [1] https://reviews.freebsd.org/D4973
>>>
>>>
>>> Best,
>>>
>>
>> I do like the idea of generalizing it, say via rc.subr
>>
>> So you can just do:
>>
>> someapp_protect=3DYES (and maybe syslogd has this enabled by default i=
n
>> /etc/defaults/rc.conf) and it prefixes the start command with protect =
-i.
>=20
> Possibly simpler to provide a list in one setting than an individual
> setting for each daemon.  With ideas from other posters:
>=20
>   oomprotect_daemons=3D"crond syslogd"
> _______________________________________________
> freebsd-hackers@freebsd.org mailing list
> https://lists.freebsd.org/mailman/listinfo/freebsd-hackers
> To unsubscribe, send any mail to "freebsd-hackers-unsubscribe@freebsd.o=
rg"


The only reason I went for daemon_protect=3D"YES" was for ease of
implementation. It would just be another command prefix like: _nice,
_fib, or _env

--=20
Allan Jude


--qrWDUXPvAWKPUkWs4FVaKV9hXetQoV6gN
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (MingW32)
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=qjhC
-----END PGP SIGNATURE-----

--qrWDUXPvAWKPUkWs4FVaKV9hXetQoV6gN--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?56A8F5D4.2070901>