From owner-freebsd-hackers@freebsd.org Wed Jan 27 16:52:34 2016 Return-Path: Delivered-To: freebsd-hackers@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 48A05A70AAB for ; Wed, 27 Jan 2016 16:52:34 +0000 (UTC) (envelope-from allanjude@freebsd.org) Received: from mx1.scaleengine.net (mx1.scaleengine.net [209.51.186.6]) by mx1.freebsd.org (Postfix) with ESMTP id 2B2661A7E for ; Wed, 27 Jan 2016 16:52:34 +0000 (UTC) (envelope-from allanjude@freebsd.org) Received: from [10.1.1.2] (unknown [10.1.1.2]) (Authenticated sender: allanjude.freebsd@scaleengine.com) by mx1.scaleengine.net (Postfix) with ESMTPSA id 34C06DF80 for ; Wed, 27 Jan 2016 16:52:33 +0000 (UTC) Subject: Re: syslogd(8) with OOM Killer protection To: freebsd-hackers@freebsd.org References: <56A86D91.3040709@freebsd.org> From: Allan Jude Message-ID: <56A8F5D4.2070901@freebsd.org> Date: Wed, 27 Jan 2016 11:52:36 -0500 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.5.1 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="qrWDUXPvAWKPUkWs4FVaKV9hXetQoV6gN" X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Jan 2016 16:52:34 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --qrWDUXPvAWKPUkWs4FVaKV9hXetQoV6gN Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable On 2016-01-27 11:36, Warren Block wrote: > On Wed, 27 Jan 2016, Allan Jude wrote: >=20 >> On 2016-01-27 01:21, Marcelo Araujo wrote: >>> Hi guys, >>> >>> I would like to know your opinion about this REVIEW[1]. >>> The basic idea is protect by default the syslogd(8) against been >>> killed by >>> OOM with an option to disable the protection. >>> >>> Some people like the idea, other people would prefer something more >>> global >>> where we can protect any daemon by the discretion of our choice. >>> >>> Thoughts? >>> >>> >>> [1] https://reviews.freebsd.org/D4973 >>> >>> >>> Best, >>> >> >> I do like the idea of generalizing it, say via rc.subr >> >> So you can just do: >> >> someapp_protect=3DYES (and maybe syslogd has this enabled by default i= n >> /etc/defaults/rc.conf) and it prefixes the start command with protect = -i. >=20 > Possibly simpler to provide a list in one setting than an individual > setting for each daemon. With ideas from other posters: >=20 > oomprotect_daemons=3D"crond syslogd" > _______________________________________________ > freebsd-hackers@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-hackers > To unsubscribe, send any mail to "freebsd-hackers-unsubscribe@freebsd.o= rg" The only reason I went for daemon_protect=3D"YES" was for ease of implementation. It would just be another command prefix like: _nice, _fib, or _env --=20 Allan Jude --qrWDUXPvAWKPUkWs4FVaKV9hXetQoV6gN Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (MingW32) iQIcBAEBAgAGBQJWqPXYAAoJEBmVNT4SmAt+Ca4QANKA6ZmMCSqEDnYpZS5DKEzo nXXu87mfHGT26Dy7fAXKqnCvfxsDTkDiM4ryYHHQASZX5NENcmpdUdjwd1uegDOu ZBR/eBR2NHheLEutOO2/irpTeM72Cke8Zr5Dwu6qteC4Mps47qcSNH5iH32BDrV0 akVbY+Xe0MtZ7Jhu/EwrNfsV4AR1iBq7uccZOB8z+Jitqq2rv6fn/4mDYbQZCRKS qIBZ8NKsTw3vMYz6+MUEOs+sJa41oepMFDnB5sTpIe4sKKPOxcfI+ZlHAp3ZBaDv Pa0Gbe3IZObPIBXApWkCzbKbDzZQ3sWWtYTB0IJ+KQvn7hXhZAg6Mj0Gvo0v3k94 B+gfI0DuRWvSNCJ7ZUbrw+es32Eir+OM6ckD/NrdSbIw6Ce+KrsHSkCR5KRvA4Qp zI8KS/ho1/T0QFRmGxGGrJ+MsbdjRgH0u6jZRO/GkwGMPWUjvm8I9NxH6GnWOss9 FFuWredgeSWcOha/3J+LU98xG24f3o4lvsb9Ia989DYaZEB6e7wmKy8bxkSAs27C L4VppAvo4nEEJa/gNh7tiWkyxVgNIOD23IbGgaw1DCY4gqNK1hjqgWExhRG+wlI9 HrTmqnnNWHBvc4M9QMtwUjRjjp6L16gxuYDV6mpuHtW7RpHzLbBKOPl+odGeNt0s 46+7grjAA9sb66uO3duV =qjhC -----END PGP SIGNATURE----- --qrWDUXPvAWKPUkWs4FVaKV9hXetQoV6gN--