Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1759423Ab0LNPu1 (ORCPT ); Tue, 14 Dec 2010 10:50:27 -0500 Received: from smtp1.linux-foundation.org ([140.211.169.13]:54672 "EHLO smtp1.linux-foundation.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1757928Ab0LNPu0 convert rfc822-to-8bit (ORCPT ); Tue, 14 Dec 2010 10:50:26 -0500 MIME-Version: 1.0 In-Reply-To: <20101214152259.67896960@suzukikp> References: <20101214152259.67896960@suzukikp> From: Linus Torvalds Date: Tue, 14 Dec 2010 07:49:37 -0800 Message-ID: Subject: Re: [RFC] [Patch 0/21] Non disruptive application core dump infrastructure To: "Suzuki K. Poulose" Cc: linux-kernel@vger.kernel.org, Jeremy Fitzhardinge , Christoph Hellwig , Masami Hiramatsu , Ananth N Mavinakayanahalli , Daisuke HATAYAMA , Andi Kleen , Roland McGrath , Amerigo Wang , KAMEZAWA Hiroyuki , KOSAKI Motohiro , Oleg Nesterov , Andrew Morton Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8BIT Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1078 Lines: 23 On Tue, Dec 14, 2010 at 1:52 AM, Suzuki K. Poulose wrote: > > This is series of patches implementing an infrastructure for capturing the core > of an application without disrupting its process semantics. > > The infrastructure makes use of the freezer subsystem in kernel to freeze the > threads and then collect the information to generate ?the core. This seems to be a fundamentally flawed approach. >From a security standpoint, it looks like a total disaster. A frozen process is really hard to get rid of, so it looks like an obvious DoS attack to just create lots of processes, then sneakily freeze them all, and then laugh at the poor system admin who has no idea what's going on. While frozen, the things are basically unkillable but look entirely normal, no? Linus -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/