Re: [PATCH] [request for inclusion] Realtime LSM

From: Lee Revell
Date: Wed Jan 12 2005 - 17:17:20 EST


On Wed, 2005-01-12 at 08:49 +0100, Arjan van de Ven wrote:
> On Tue, Jan 11, 2005 at 07:43:29PM -0600, Jack O'Quin wrote:
> > > This is straying from the core issue... But, Arjan's saying that an RT
> > > (non-root) task could trash the filesystem if it deadlocks the machine
> > > (because those important fs and IO threads don't run).
> >
> > Lexicographic ambiguity: Lee and Paul are using "trash" for things
> > like installing a hidden suid root shell or co-opting sendmail into an
> > open spam relay. Arjan just means crashing the system which forces
> > reboot to run fsck.
>
> I actually meant data corruption.

OK, so the ability to run RT tasks implies the ability to possibly
corrupt data. It appears that this can't be fixed until we have a real
isochronous scheduling class; for the forseeable future RT tasks will
need SCHED_FIFO and nonroot users will need to run them.

Anyway it's good to see the problem finally being taken seriously.

Lee

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/