Received: by 2002:a05:6a10:22f:0:0:0:0 with SMTP id 15csp1388203pxk; Sun, 13 Sep 2020 00:28:16 -0700 (PDT) X-Google-Smtp-Source: ABdhPJwZcjcarlaZXSn6eoJMfHXVZIErnCKYrSDDKwci0cta6syw3tgz8emNoWvbyZIOLwhcjSkK X-Received: by 2002:a17:906:480a:: with SMTP id w10mr9042231ejq.372.1599982096516; Sun, 13 Sep 2020 00:28:16 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1599982096; cv=none; d=google.com; s=arc-20160816; b=W2G8YKlhJWa5oBNWr3gRno0+GNGp7bE+WHXrzFs1my6fi88zdjOKq/erUfeXTzRvp7 tM9eC4rKSixr/kzyZA0CcZhgLorj57eClESb72Ty6nuTfwj9YSNw5yWrYRgmnliu1Omz Y0m4btSia/lWwEhUBIqRLQdTSrH2ayZ2aGDe8Rr2CQ3hUFExl+dmbdCUXRQA2FR+QoYb YALXXSnpJXgeQHLJEXFCrjEs0lyhPy4YExcHa09LVKvnhog9i3u0ENEeCgXJdkApF/ci DYrrO45BbwTubc6HsrwojPgrkJv38YrduTde2+uMH4TM2Nmxu9EPl0HR5WbLzhEedqnu nDnw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:content-transfer-encoding:in-reply-to :content-disposition:mime-version:references:message-id:subject:cc :to:from:date:dkim-signature; bh=/9DVMujbg5/5sXk6QyP65ozbfYt2kvBeI2c756HNx8w=; b=qMQNgqaZYmPenNzVOG5krOSZ7iadDjzYgQr+rbw5u3/WNYeEP2VoQiBJ2yoCKU9oZb PXFE0Cj8BIqRmQG+D0+JFGxXtzhSQmDLU9FWSKH3vn59M/yg+wVWf1GQDQwE/a0vitrz FhdM/+EYX3dkScGeV9fvgnnC7vEn7rVvB4LsPqXhJkjQtZ3wQzdBUrkeszlAdI6P/IN+ ST0rwiWbKwC2sYJpSF6hCmZzKqvmSTcb3iZ1iH7OOH+IrGDu0mIuB+ayoCAwDqYMCIZX maLDWTe7ZEt5xSQfPpODDaO57c9DdnBk6gD7wCYSWhfHiGp424ISA1EAcq0j6w4djosc c3wA== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@gmx.net header.s=badeba3b8450 header.b=N8ep3FXJ; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id b6si4972871eja.559.2020.09.13.00.27.40; Sun, 13 Sep 2020 00:28:16 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; dkim=pass header.i=@gmx.net header.s=badeba3b8450 header.b=N8ep3FXJ; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1725919AbgIMH0P (ORCPT + 99 others); Sun, 13 Sep 2020 03:26:15 -0400 Received: from mout.gmx.net ([212.227.17.21]:38885 "EHLO mout.gmx.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1725878AbgIMH0M (ORCPT ); Sun, 13 Sep 2020 03:26:12 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=gmx.net; s=badeba3b8450; t=1599981887; bh=99aKcspekjOIiE1dIohqbzZPMFeB5+r78KjmQ3fL2j4=; h=X-UI-Sender-Class:Date:From:To:Cc:Subject:References:In-Reply-To; b=N8ep3FXJadQHM/k2+U+dv6FDZEK9jpfHx0ugUcpFHNBc70+BI2NeHIlD9PdIvN3tO jtqn1a2SRKAK0TlJIJi5ncvgsgNqouVetGdsqHRzoH3Bi7gVFrn4uOHEFHGh0LXI5d z87gAdRHAw8wiDHB+vI4icH/8MGhI7qZxzo9Z5UY= X-UI-Sender-Class: 01bb95c1-4bf8-414a-932a-4f6e2808ef9c Received: from ubuntu ([79.150.73.70]) by mail.gmx.com (mrgmx105 [212.227.17.174]) with ESMTPSA (Nemesis) id 1N5G9t-1kgDPe1ERh-011Bo0; Sun, 13 Sep 2020 09:24:47 +0200 Date: Sun, 13 Sep 2020 09:24:30 +0200 From: John Wood To: Ondrej Mosnacek , Mel Gorman Cc: John Wood , James Morris , Kees Cook , Kernel Hardening , Matthew Wilcox , Jonathan Corbet , Alexander Viro , Ingo Molnar , Peter Zijlstra , Juri Lelli , Vincent Guittot , Dietmar Eggemann , Steven Rostedt , Ben Segall , Luis Chamberlain , Iurii Zaikin , "Serge E. Hallyn" , linux-doc@vger.kernel.org, Linux kernel mailing list , linux-fsdevel@vger.kernel.org, Linux Security Module list Subject: Re: [RESEND][RFC PATCH 0/6] Fork brute force attack mitigation (fbfam) Message-ID: <20200913072430.GA2965@ubuntu> References: <20200910202107.3799376-1-keescook@chromium.org> <202009120055.F6BF704620@keescook> <20200912093652.GA3041@ubuntu> <20200912144722.GE3117@suse.de> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: X-Provags-ID: V03:K1:HpjB457sek++T0MbqbEi/n5kjJ86x0yFV9KWAryC4ubpox1jgjg VhRcOhBqCFlvmiSB8zAdW7ExIiFFLQH2FyzB6cv6zQrzC5c7QJRatK3U46GjC5Sjh7ps9+j 3YUuXvIPhqD7LGRVrrRXL9xIcAEooZ51xs33Q315qVFIbiVNKQrjhLG2wJxOjPGDoKR+h3Z X01Sj46DS1qZ3aghTigCQ== X-Spam-Flag: NO X-UI-Out-Filterresults: notjunk:1;V03:K0:+ahVl6Hk4D0=:4DkSuUaUp/GpmbbXx0a5fY Nr0OswsR92f5hbCXbkyeWRAFAmZLBiEiSSbulOUa2GF3+XCEreCZ4u4t1oivK9baWhy4IEvZi fnzkkIYpGitZz2r2IDT5oDSsMU/Vyss0biL6Z3jSLsbAc+M+78/4j1b2PA3YkwiqmfLKgbRaW kSNxffYrTVnuoiHSstN5uagXLbSHziBRgGtuQbnt6ikv6vebMplwKDGEuUVJyHD+lOMuM5UMm B/b17RmOpbwkPYn9wjeXrikit/kPEmWRoGMjZFd9IU40CJmpghgpjgryKtA1VZon6Giz3P0aB rNZbl8S+ZqSANSNa7z9KzAMbbkO5XG+yimbo5X0CO8lbqj65rAVxlx2+h0CItKCWQenDl6pCd 7HGgM+YOggswf/f9X12fLXfW6CPeG69KCUfsLun+jyTFWFvAvvkKQNzpVR1y+oahcnW+Zmwfz QkuxtgrBmeLmLBHds5hqvQsngB1+8vv85z8R1Cwi5IrdaOotrVcs8IJY4Ukfc6T7qENVvss1q p3zWMZAlemjudQCn/DNi0aDkSEM+Cmayd08t3CFmoVJVAQ3nT0auLIiYxWwdUGY3pKwKUcE/W plWkRVA7rRLXg2+QBeyThhEuSt8a71+UmQw1azTZnv3SFw6YNnIx38uO+nZJQwNR3zkTZNWe6 b74XVLlN7BdbJ07tFi3CvXPoLU0W7og9yI9Jew9Luy1cOO6GQqY4H+Qkm20kLI95vutP8x5GZ Go/niXT0BNrW170DiZPrhHF5ffDGGKw2dj34+0fbQ7kJpdTSjN5JFI+PbYcQLr7pPyYhi1Za6 frkpdAHDdE3bRLRLtPFswdRCGSJyeulxQwCe5SuSAHWoyCbfaxQRua2Qq6HQj/KYE8S28J6tp w7z78KuIe/LTy6jDp58wr2FGgoxiJ70rUHDoq/imMMhAX1xupxqQFVGHQeBkQKeb3BjYJNEsF nnlt4Mq6a8JlUbwDew29H5BiwyJ0MRcCXfyvB1qi4R2ykQ+cGK45f0j3Z7NzkVZa21OmgoDC+ WB+g+msN76x6A6foMsaU39G/EDVfi3Ud3bK76wkePjl8Vu/CeMfKGSFCHSKook0xWpXgitVmi IoZQ7QOOIBUp/rXxxD0+RrderfNAmwHCWlbxHYTy0l/W2BdB2gAk/+Wet+ziC3U3QSsg0FWwV QTxURgAgpzBKBYeMtlNKl8ksGiAX7trszmMmuIdDt69E7Zz1e4/dnRIryo+wDFlsOXQKlPmbW HMqxy/K4V7kHlJ0Kx0iTJgmBQ5idPnjP/s4YjRA== Content-Transfer-Encoding: quoted-printable Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Hi, On Sat, Sep 12, 2020 at 10:48:39PM +0200, Ondrej Mosnacek wrote: > On Sat, Sep 12, 2020 at 4:51 PM Mel Gorman wrote: > > On Sat, Sep 12, 2020 at 11:36:52AM +0200, John Wood wrote: > > > On Sat, Sep 12, 2020 at 12:56:18AM -0700, Kees Cook wrote: > > > > On Sat, Sep 12, 2020 at 10:03:23AM +1000, James Morris wrote: > > > > > On Thu, 10 Sep 2020, Kees Cook wrote: > > > > > > > > > > > [kees: re-sending this series on behalf of John Wood > > > > > > also visible at https://github.com/johwood/linux fbfam] > > > > > > > > > > > > From: John Wood > > > > > > > > > > Why are you resending this? The author of the code needs to be a= ble to > > > > > send and receive emails directly as part of development and main= tenance. > > > > > > I tried to send the full patch serie by myself but my email got bloc= ked. After > > > get support from my email provider it told to me that my account is = young, > > > and due to its spam policie I am not allow, for now, to send a big a= mount > > > of mails in a short period. They also informed me that soon I will b= e able > > > to send more mails. The quantity increase with the age of the accoun= t. > > > > > > > If you're using "git send-email" then specify --confirm=3Dalways and > > either manually send a mail every few seconds or use an expect script > > like > > > > #!/bin/bash > > EXPECT_SCRIPT=3D > > function cleanup() { > > if [ "$EXPECT_SCRIPT" !=3D "" ]; then > > rm $EXPECT_SCRIPT > > fi > > } > > trap cleanup EXIT > > > > EXPECT_SCRIPT=3D`mktemp` > > cat > $EXPECT_SCRIPT < > spawn sh ./SEND > > expect { > > "Send this email" { sleep 10; exp_send y\\r; exp_continue } > > } > > EOF > > > > expect -f $EXPECT_SCRIPT > > exit $? > > > > This will work if your provider limits the rate mails are sent rather > > than the total amount. Yes, it seems to be what is happening. > ...or you could keep it simple and just pass "--batch-size 1 > --relogin-delay 10" to git send-email ;) Mel and Ondrej thanks a lot for the proposed solutions. I'm sure some of your solutions will be used soon. > -- > Ondrej Mosnacek > Software Engineer, Platform Security - SELinux kernel > Red Hat, Inc. Regards, John Wood