>One problem with audio systems that >a) runs as RT processes >b) allows user loaded plugins > >Is that it is very simple to make a DOS (Denial of service) attack. >This has resulted in that the feature to run arts in RT mode has been >disabled... see artswrapper.c, search for NO_MORE_LOCAL_DOS_HOLE > >I made this code as a proof of concept for a monitor that catches and >reduces priority for processes that misuse this feature. >(this version reduces the priority for all RT processes at once...)
a side note: JACK, when run in RT mode, launches its own maximal priority thread to perform exactly this function. all other RT threads run at lower priorities. i believe that it is not possible to use JACK to perform DOS attacks like this unless the client modifies its scheduling priority itself. --p
