Messages in this thread | | | From | Ferry Toth <> | Subject | DOS by unprivileged user | Date | Thu, 19 Apr 2018 21:13:35 +0200 |
| |
It appears any ordinary user can easily create a DOS on linux.
One sure way to reproduce this is to open gitk on the linux kernel repo (SIC) on a machine with 8GB RAM 16 GB swap on a HDD with btrfs and quad core + hyperthreading. But I will be easy enough to get the same effect with more RAM, other fs etc.
In this case gitk allocates more and more memory (until my system freezes 6.5GB of 7.5GB avaiable), the system starts swapping or writing to tmp files (can't investigate as there is no time until it freezes) and the io wait goes to 100% on all cores. At this point it is impossible to login from remote and local keyboard and mouse are frozen. Hard reset is the only way out at this point.
IMHO there is something wrong in how the kernel hands out resources, in this case memory, CPU time and disk accesses. It should be easily measurable that a single application is allocating all memory and consequently all CPU time is spent in io wait. I'm pretty sure that if the kernel would stop or reduce allocating CPU time to the hogging (user) process causing excessive io wait, the machine would continue just fine. And probably a single process should not even be allowed to allocate this amount of memory. Or at least should not force other applications to get swapped out.
In effect gitk should have beeb forced to run slow or be killed off (which doesn't happen because probably the kernel itself doesn't receive enough CPU time).
As a positive side effect maybe someone would dig into gitk and make it less memory hungry (qgit is half as hungry, still a lot).
-- Ferry Toth
| |