Re: [PATCH] ipc/shm: disable SHMALL, SHMMAX

2014-04-12 Thread Davidlohr Bueso
On Sat, 2014-04-12 at 08:39 -0700, Davidlohr Bueso wrote: > On Sat, 2014-04-12 at 13:48 +0200, Manfred Spraul wrote: > > Shared memory segment can be abused to trigger out-of-memory conditions and > > the standard measures against out-of-memory do not work: > > > > - It is not possible to use setr

Re: [PATCH] ipc/shm: disable SHMALL, SHMMAX

2014-04-12 Thread Davidlohr Bueso
On Sat, 2014-04-12 at 13:48 +0200, Manfred Spraul wrote: > Shared memory segment can be abused to trigger out-of-memory conditions and > the standard measures against out-of-memory do not work: > > - It is not possible to use setrlimit to limit the size of shm segments. > > - Segments can exist w

[PATCH] ipc/shm: disable SHMALL, SHMMAX

2014-04-12 Thread Manfred Spraul
Shared memory segment can be abused to trigger out-of-memory conditions and the standard measures against out-of-memory do not work: - It is not possible to use setrlimit to limit the size of shm segments. - Segments can exist without association with any processes, thus the oom-killer is unabl