Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id ; Fri, 23 Mar 2001 12:39:59 -0500 Received: (majordomo@vger.kernel.org) by vger.kernel.org id ; Fri, 23 Mar 2001 12:39:49 -0500 Received: from router-100M.swansea.linux.org.uk ([194.168.151.17]:24335 "EHLO the-village.bc.nu") by vger.kernel.org with ESMTP id ; Fri, 23 Mar 2001 12:39:44 -0500 Subject: Re: [PATCH] Prevent OOM from killing init To: jas88@cam.ac.uk (James A. Sutherland) Date: Fri, 23 Mar 2001 17:32:46 +0000 (GMT) Cc: dwguest@win.tue.nl (Guest section DW), riel@conectiva.com.br (Rik van Riel), orourke@missioncriticallinux.com (Patrick O'Rourke), linux-mm@kvack.org, linux-kernel@vger.kernel.org In-Reply-To: from "James A. Sutherland" at Mar 23, 2001 05:26:22 PM X-Mailer: ELM [version 2.5 PL1] MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-Id: From: Alan Cox Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org > That depends what you mean by "must not". If it's your missile guidance > system, aircraft autopilot or life support system, the system must not run > out of memory in the first place. If the system breaks down badly, killing > init and thus panicking (hence rebooting, if the system is set up that > way) seems the best approach. Ultra reliable systems dont contain memory allocators. There are good reasons for this but the design trade offs are rather hard to make in a real world environment Solving the trivial overcommit case is not a difficult task but since I don't believe it is needed I'll wait for those who moan so loudly to do it - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/