Received: by 2002:a05:6a10:22f:0:0:0:0 with SMTP id 15csp1168293pxk; Sat, 12 Sep 2020 13:53:04 -0700 (PDT) X-Google-Smtp-Source: ABdhPJzg86xk7RFGqkIkrOlOw3MU0mWDhuQ/3xWY3mHvHs4QfGwKEQ4FzuyUR7AZpdqH251yZao1 X-Received: by 2002:a17:906:4951:: with SMTP id f17mr7400631ejt.29.1599943984519; Sat, 12 Sep 2020 13:53:04 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1599943984; cv=none; d=google.com; s=arc-20160816; b=rKDK9TQvz/Dd6zG0ugl/gVqmkXvrKC5BNjgXzZeFz31aWoW+KAo1C3UF9EnGnNcRSR enyBdEUWjpIIl8GcVCHWsQRqE3DE3a1BFMQGJ5S41kerHSlBHDTWndMPPAB4d21queWq VI2jtDwEyzrkYTVHcVSh9CPdLoblGTn8Mts1adGIxJV4FAlb3ffcqURok5eFHos6WJcQ 4yPVZT5bB/MxYN11hddLs0U5o6snkjpyvMmqoiuUUdtciPq+6dUWcKRPKOTQg5VsIhUj 6GPGEZKN4ogfUhhJdb74Enl5P6zCrnEgkJwKTqpTJVM/90Qw19XCcbwQ2/qX5UCHm2FL Brxw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:dkim-signature; bh=cJuHYlMJJGIC0qBjlrqnGCpyE1IZMKKDiH+/8N+tl5c=; b=TcsTKozyZSvd8KFB7JCUvTA+aVNNu5Z9/dXjcmUKtv4pyRrJsaqve52Y76YCTxiO7d X+HfI9l8eZwnxas712YcLzMzqHO12WGlk6iAFYS1VMQLBs0tVupGgujbCXOKG27L8bLb u4uOp3njhvnYRBE88en1xllVKdDKsKrGQf6AmTu7BvV2zZguKE5urzubSbg7MR5FapSq 9UmK0gPJ+SX5upLOU1sJG4DscuvHpKkLvvHEp0n4SsxsdllO5N1zjfzr2i0RLLcScvtc aqlp/SdskwcQcO1zDSt93m2b8EjLk86lOi9aIDFaYyju/NvP26dGyZrw7+jE2U/yrF8X BRvg== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@redhat.com header.s=mimecast20190719 header.b=dr0Ce72Z; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=redhat.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id q20si3762536ejx.248.2020.09.12.13.52.42; Sat, 12 Sep 2020 13:53:04 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; dkim=pass header.i=@redhat.com header.s=mimecast20190719 header.b=dr0Ce72Z; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=redhat.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1725949AbgILUte (ORCPT + 99 others); Sat, 12 Sep 2020 16:49:34 -0400 Received: from us-smtp-delivery-124.mimecast.com ([63.128.21.124]:41854 "EHLO us-smtp-delivery-124.mimecast.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1725902AbgILUtA (ORCPT ); Sat, 12 Sep 2020 16:49:00 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1599943737; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=cJuHYlMJJGIC0qBjlrqnGCpyE1IZMKKDiH+/8N+tl5c=; b=dr0Ce72Zjyh5SeDxwKvFw4/m19xObHSL43mDbzO+s7revoyWKKXwlq0IY0uNdFBtynqS7+ +8klonsDyYpwtdJshU07+r1pbtmiutmK7sGN9COiJxZdxJ1wrsu8qZUgFCtDVTNVUNJSSX NWJmUnANjHfzUCxNxI/5uGqTukRwVWY= Received: from mail-lf1-f72.google.com (mail-lf1-f72.google.com [209.85.167.72]) (Using TLS) by relay.mimecast.com with ESMTP id us-mta-346-p3zf0SIKPoafLJQv-Lbi0Q-1; Sat, 12 Sep 2020 16:48:54 -0400 X-MC-Unique: p3zf0SIKPoafLJQv-Lbi0Q-1 Received: by mail-lf1-f72.google.com with SMTP id c194so1522097lfg.14 for ; Sat, 12 Sep 2020 13:48:53 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=cJuHYlMJJGIC0qBjlrqnGCpyE1IZMKKDiH+/8N+tl5c=; b=c431fH09pr5pwUKRMQhQ6vsn2+EbC5dinrolqC6fhaOOVglkRkWuPobv1L3lp72cYH yfze7sXRg6Nz8Ri1c5yFlZC7oTkbyf6iYkVjruA9zBFnznigFrdQrlkqulDd7XkQs5ZA O7dTIGQPIyvdRWpjmwhH2ambQYytvHUtAh/Y28VRnxyfTkTEjQ+UflqMnwUe5uMOhfV0 uESPpwnYfZzyAgQ+Bwv3niG0TbmKdlklQq4Xi3FiQG/Egk8T4Qc1tgYAohsx/AB6HzEx ZtsmB+oVsIoq0q5Qb4y2mukYZ6sGOE0qAcYG6x5EQ5epKoerdG1n5vK7J56kz7na3vXw mFzg== X-Gm-Message-State: AOAM530ZRScAWy59aapfiumcF/kEEMqBOmhyh2SHVjjkwXB2JL6RSjxI Fjz8WoUv0MlFsgNx+hUTFh0VQzg5q+o8CFnNFOQJtsremBVPmCl+ktMAqAYzLBn6FdsKJNX4d1N nZ3PCVmVYoeMDm4dlPaAwiyMjzjqX3XzqpceiOudP X-Received: by 2002:a2e:8046:: with SMTP id p6mr2567816ljg.372.1599943732616; Sat, 12 Sep 2020 13:48:52 -0700 (PDT) X-Received: by 2002:a2e:8046:: with SMTP id p6mr2567810ljg.372.1599943732385; Sat, 12 Sep 2020 13:48:52 -0700 (PDT) MIME-Version: 1.0 References: <20200910202107.3799376-1-keescook@chromium.org> <202009120055.F6BF704620@keescook> <20200912093652.GA3041@ubuntu> <20200912144722.GE3117@suse.de> In-Reply-To: <20200912144722.GE3117@suse.de> From: Ondrej Mosnacek Date: Sat, 12 Sep 2020 22:48:39 +0200 Message-ID: Subject: Re: [RESEND][RFC PATCH 0/6] Fork brute force attack mitigation (fbfam) To: Mel Gorman Cc: John Wood , James Morris , Kees Cook , Kernel Hardening , Matthew Wilcox , Jonathan Corbet , Alexander Viro , Ingo Molnar , Peter Zijlstra , Juri Lelli , Vincent Guittot , Dietmar Eggemann , Steven Rostedt , Ben Segall , Luis Chamberlain , Iurii Zaikin , "Serge E. Hallyn" , linux-doc@vger.kernel.org, Linux kernel mailing list , linux-fsdevel@vger.kernel.org, Linux Security Module list Content-Type: text/plain; charset="UTF-8" Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Sat, Sep 12, 2020 at 4:51 PM Mel Gorman wrote: > On Sat, Sep 12, 2020 at 11:36:52AM +0200, John Wood wrote: > > On Sat, Sep 12, 2020 at 12:56:18AM -0700, Kees Cook wrote: > > > On Sat, Sep 12, 2020 at 10:03:23AM +1000, James Morris wrote: > > > > On Thu, 10 Sep 2020, Kees Cook wrote: > > > > > > > > > [kees: re-sending this series on behalf of John Wood > > > > > also visible at https://github.com/johwood/linux fbfam] > > > > > > > > > > From: John Wood > > > > > > > > Why are you resending this? The author of the code needs to be able to > > > > send and receive emails directly as part of development and maintenance. > > > > I tried to send the full patch serie by myself but my email got blocked. After > > get support from my email provider it told to me that my account is young, > > and due to its spam policie I am not allow, for now, to send a big amount > > of mails in a short period. They also informed me that soon I will be able > > to send more mails. The quantity increase with the age of the account. > > > > If you're using "git send-email" then specify --confirm=always and > either manually send a mail every few seconds or use an expect script > like > > #!/bin/bash > EXPECT_SCRIPT= > function cleanup() { > if [ "$EXPECT_SCRIPT" != "" ]; then > rm $EXPECT_SCRIPT > fi > } > trap cleanup EXIT > > EXPECT_SCRIPT=`mktemp` > cat > $EXPECT_SCRIPT < spawn sh ./SEND > expect { > "Send this email" { sleep 10; exp_send y\\r; exp_continue } > } > EOF > > expect -f $EXPECT_SCRIPT > exit $? > > This will work if your provider limits the rate mails are sent rather > than the total amount. ...or you could keep it simple and just pass "--batch-size 1 --relogin-delay 10" to git send-email ;) -- Ondrej Mosnacek Software Engineer, Platform Security - SELinux kernel Red Hat, Inc.