-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Jaromir Dolecek <jdolecek@netbsd.org> writes:

> The sleep thing is smart & simple solution to tough problem. I don't
> see how it could cause any new problem. So I currently don't see why
> to not have it there.

It also only occurs in the case where a process is trying to exceed
its limit.

The suggestion I has was maintain a counter, and after 10 or 100 times
in a row where the fork failed, then sleep.  That clearly puts it into
a run-away process or attack context.

- --Michael
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (NetBSD)
Comment: See http://www.flame.org/~explorer/pgp for my keys

iD8DBQE98SvFl6Nz7kJWYWYRAu/2AJsGiQPK63lDdm3ALaCdwQ7ix+hdIgCeLZbZ
aORyO7Q3r8rZ924UnuJbaWI=
=RJj4
-----END PGP SIGNATURE-----