Subject: Re: kern/2352: ident daemon is slow, it should not use /dev/kmem at all
To: None <netbsd-bugs@NetBSD.ORG>
From: der Mouse <mouse@Collatz.McRCIM.McGill.EDU>
Date: 05/11/1996 07:40:36
>> This is just an example of how it can be done. The modified identd
>> has to run as root, thus the inetd.conf file has to be edited too.
>> identd should be statically linked, to reduce the startup overhead.
> Of course, this example assumes that:
> (1) identd should be runinng at all, and
> (2) in any case, the kernel bloat is worth a bit of
> convenience for identd.
> I'd say that the latter is definitely not true, and the former is
> probably not.
As a sysadmin, I'm definitely going to run identd (or something
functionally equivalent to it), whether or not it's supplied with the
system. The security benefits are just too great to ignore.
However, I'm also going to run it with -w -t60, which amortizes the
startup overhead (shared libraries, nlist on netbsd, etc) to the point
where issues raised in this PR are irrelevant. (Under light load, it
doesn't matter, and under heavy load, it will stay running and thus not
have to constantly redo the startup actions.)