Subject: Re: filesystem code should not panic
To: Jaromir Dolecek <dolecek@ics.muni.cz>
From: Manuel Bouyer <bouyer@antioche.lip6.fr>
List: tech-kern
Date: 11/23/1999 17:58:47
On Tue, Nov 23, 1999 at 05:46:44PM +0100, Jaromir Dolecek wrote:
> I agree wholeheartily. The filesystem should not panic the machine,
> dropping into DDB is about maximum what I'd take as "feasible".
> IIRC someone also said that the panic might be optional
> only if the user who mounted the fs is root (to avoid DoS attack).
> That might be the first step.

Aggred for user mounts but I want to keep the possibility for root mounts
to stop the machine when a FS goes bad. Keeping the machine running without an
important FS can have bad consequences (think mail servers ...).

--
Manuel Bouyer, LIP6, Universite Paris VI.           Manuel.Bouyer@lip6.fr
--