is there some reason why whether or not to overcommit can't be a kernel
compile time option?

  Or that a process can signal its desire to not get SIGKILL by registering
a non-default SIGDANGER (which we'd have to create) handler ala AIX?

] Train travel features AC outlets with no take-off restrictions|  firewalls  [
]   Michael Richardson, Sandelman Software Works, Ottawa, ON    |net architect[
] mcr@sandelman.ottawa.on.ca http://www.sandelman.ottawa.on.ca/ |device driver[
] panic("Just another NetBSD/notebook using, kernel hacking, security guy");  [