linux-kernel - Re: Per-user swap devices.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-Id: <200607191500.k6JF09EQ005021@turing-police.cc.vt.edu>
Date:	Wed, 19 Jul 2006 11:00:09 -0400
From:	Valdis.Kletnieks@...edu
To:	Ian Stirling <ian.stirling@...ve.plus.com>
Cc:	linux-kernel@...r.kernel.org
Subject: Re: Per-user swap devices.

On Wed, 19 Jul 2006 10:54:38 BST, Ian Stirling said:

> It would be really nice to be able to simply: chown crashalot.users 
> /dev/swap0 ;swapon /dev/swap0
> Then anything run by crashalot would swap to /dev/swap0 - and not locally.
> If it crashes, then firefox/whatever else bloated that they were running 
> simply dies.
> 
> I assume this is not currently possible.
> How much work would it be to get it to be so?

This doesn't look like it will do as much good as you think.  The problem
is what to do when something run by some *other* UID needs a page - you need
to fix the code to preferentially steal a page from a 'crashalot' process.

And at that point, what you probably want instead is a global per-UID RSS
limit.  This looks like a job for a CKRM resource class controller rather than
a hack to the swap code.

Content of type "application/pgp-signature" skipped