Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.kernel > #1203753

Re: kdbus: to merge or not to merge?

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

On Sun, 9 Aug 2015, Greg Kroah-Hartman wrote:

> The issue is with userspace clients opting in to receive all
> NameOwnerChanged messages on the bus, which is not a good idea as they
> constantly get woken up and process them, which is why the CPU was
> pegged.  This issue should now be fixed in Rawhide for some of the
> packages we found that were doing this. Maintainers of other packages
> have been informed.  End result, no one has ever really tested sending
> "bad" messages to the current system as all existing dbus users try to
> be "good actors", thanks to Andy's testing, these apps should all now
> become much more robust.

Does it require elevated privileges to opt to receive all NameOwnerChanged 
messages on the bus? Is it the default unless the apps opt for something more 
restrictive? or is it somewhere in between?

I was under the impression that the days of writing system-level stuff that 
assumes that all userspace apps are going to 'play nice' went out a decade or 
more ago. It's fine if the userspace app can kill itself, or possibly even the 
user it's running as, but being able to kill apps running as other users, let 
alone the whole system is a problem nowdays.

It may be able to happen in a default system, but this is why cgroups and 
namespaces have been created, to give the system admin the ability to limit the 
resources that any one app can consume. Introducing a new mechanism that allows 
one user to consume resources allocated to another and kill the system without 
providing a kernel level mechanism to limit the damage (as opposed to fixing 
individual apps) seems rather short-sighted at best.

David Lang

Back to linux.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Re: kdbus: to merge or not to merge? David Herrmann <dh.herrmann@gmail.com> - 2015-08-05 09:20 +0200
  Re: kdbus: to merge or not to merge? Andy Lutomirski <luto@amacapital.net> - 2015-08-05 22:20 +0200
    Re: kdbus: to merge or not to merge? David Herrmann <dh.herrmann@gmail.com> - 2015-08-06 10:10 +0200
      Re: kdbus: to merge or not to merge? Martin Steigerwald <martin@lichtvoll.de> - 2015-08-06 10:30 +0200
      Re: kdbus: to merge or not to merge? Andy Lutomirski <luto@amacapital.net> - 2015-08-06 17:30 +0200
        Re: kdbus: to merge or not to merge? Daniel Mack <daniel@zonque.org> - 2015-08-06 20:20 +0200
          Re: kdbus: to merge or not to merge? Andy Lutomirski <luto@amacapital.net> - 2015-08-06 20:50 +0200
            Re: kdbus: to merge or not to merge? Daniel Mack <daniel@zonque.org> - 2015-08-07 16:50 +0200
              Re: kdbus: to merge or not to merge? Andy Lutomirski <luto@amacapital.net> - 2015-08-07 17:10 +0200
              Re: kdbus: to merge or not to merge? Greg Kroah-Hartman <gregkh@linuxfoundation.org> - 2015-08-09 21:10 +0200
                Re: kdbus: to merge or not to merge? Daniel Mack <daniel@zonque.org> - 2015-08-10 00:20 +0200
                Re: kdbus: to merge or not to merge? Andy Lutomirski <luto@amacapital.net> - 2015-08-10 04:20 +0200
                Re: kdbus: to merge or not to merge? Linus Torvalds <torvalds@linux-foundation.org> - 2015-08-10 19:10 +0200
                Re: kdbus: to merge or not to merge? David Lang <david@lang.hm> - 2015-08-10 04:50 +0200
            Re: kdbus: to merge or not to merge? cee1 <fykcee1@gmail.com> - 2015-08-07 17:40 +0200

csiph-web