Subject: Re: Fork bomb protection patch
To: NetBSD Kernel Technical Discussion List <tech-kern@NetBSD.ORG>
From: Phil Nelson <philnelson@attbi.com>
List: tech-kern
Date: 12/04/2002 19:18:31
On Wednesday, December 4, 2002 at 10:07:35 (+0100), Jaromir Dolecek wrot=
e:
> Subject: Fork bomb protection patch
>
> * make process sleep for 0.5s if the system table is full
> or when the user reaches their process number limit
> - this is to not hog the system with huge number of CPU-hungry
> looping processes
How about having this .5s sleep kick in only after a user has had=20
a number of unsuccessful forks without a successful one. This would stil=
l
stop the fork bomb, but let non-bombs that run at the process limit conti=
nue
without the .5s sleep.
--Phil