Forkbomb??

[Simon Santoro]

Michael Hipp wrote:
> Simon Santoro wrote:
> 
>> Personally I don't like someone else to decide what is best for me, 
>> like how many processes I am allowed to run, how many cpu time, or cut 
>> down on anything else on my machine.
> 
> 
> I submit that you have missed the point.
> 
> If you're knowledgeable enough to care about the proc limits, then 
> you're knowledgeable  enough to set it to your preferences. No-one is 
> forcing anything on you.

Sure. That's what I sad in my previous email.

> But for everyone else, they expect their distro to be as secure out of 
> the box as reasonably possible.

Right.

> (Ubuntu has done a great job of this.) 

I agree.

> Putting a limiting value on procs would help everyone and likely harm 
> no-one.

I don't agree here. What if a program is designed to make a lot of 
forks, for example to solve a math problem (factorize big numbers) or 
something like that. That program could not run anymore.

So I think that you can not protect a user that executes scripts from a 
doubtful source on his machine, because that user is already screwed 
anyway.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 256 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/ubuntu-users/attachments/20050319/1b3eb60b/attachment.sig>