From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S932314AbWHRT5l (ORCPT ); Fri, 18 Aug 2006 15:57:41 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S932491AbWHRT5l (ORCPT ); Fri, 18 Aug 2006 15:57:41 -0400 Received: from e32.co.us.ibm.com ([32.97.110.150]:54988 "EHLO e32.co.us.ibm.com") by vger.kernel.org with ESMTP id S932314AbWHRT5k (ORCPT ); Fri, 18 Aug 2006 15:57:40 -0400 Subject: Re: [ckrm-tech] [RFC][PATCH 1/7] UBC: kconfig From: Chandra Seetharaman Reply-To: sekharan@us.ibm.com To: Kirill Korotaev Cc: Andrew Morton , Rik van Riel , ckrm-tech@lists.sourceforge.net, Linux Kernel Mailing List , Andi Kleen , Christoph Hellwig , Andrey Savochkin , devel@openvz.org, hugh@veritas.com, Ingo Molnar , Alan Cox , Pavel Emelianov In-Reply-To: <44E33B46.2010200@sw.ru> References: <44E33893.6020700@sw.ru> <44E33B46.2010200@sw.ru> Content-Type: text/plain Organization: IBM Date: Fri, 18 Aug 2006 12:57:33 -0700 Message-Id: <1155931053.26155.71.camel@linuxchandra> Mime-Version: 1.0 X-Mailer: Evolution 2.0.4 (2.0.4-7) Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org As pointed in an earlier email, it would be better if we could have this in a arch-independent Kconfig, unless there is any problem with that. On Wed, 2006-08-16 at 19:35 +0400, Kirill Korotaev wrote: > Add kernel/ub/Kconfig file with UBC options and > includes it into arch Kconfigs > > Signed-Off-By: Pavel Emelianov > Signed-Off-By: Kirill Korotaev > > --- > arch/i386/Kconfig | 2 ++ > arch/ia64/Kconfig | 2 ++ > arch/powerpc/Kconfig | 2 ++ > arch/ppc/Kconfig | 2 ++ > arch/sparc/Kconfig | 2 ++ > arch/sparc64/Kconfig | 2 ++ > arch/x86_64/Kconfig | 2 ++ > kernel/ub/Kconfig | 25 +++++++++++++++++++++++++ > 8 files changed, 39 insertions(+) > > --- ./arch/i386/Kconfig.ubkm 2006-07-10 12:39:10.000000000 +0400 > +++ ./arch/i386/Kconfig 2006-07-28 14:10:41.000000000 +0400 > @@ -1146,6 +1146,8 @@ source "crypto/Kconfig" > > source "lib/Kconfig" > > +source "kernel/ub/Kconfig" > + > # > # Use the generic interrupt handling code in kernel/irq/: > # > --- ./arch/ia64/Kconfig.ubkm 2006-07-10 12:39:10.000000000 +0400 > +++ ./arch/ia64/Kconfig 2006-07-28 14:10:56.000000000 +0400 > @@ -481,6 +481,8 @@ source "fs/Kconfig" > > source "lib/Kconfig" > > +source "kernel/ub/Kconfig" > + > # > # Use the generic interrupt handling code in kernel/irq/: > # > --- ./arch/powerpc/Kconfig.arkcfg 2006-08-07 14:07:12.000000000 +0400 > +++ ./arch/powerpc/Kconfig 2006-08-10 17:55:58.000000000 +0400 > @@ -1038,6 +1038,8 @@ source "arch/powerpc/platforms/iseries/K > > source "lib/Kconfig" > > +source "ub/Kconfig" > + > menu "Instrumentation Support" > depends on EXPERIMENTAL > > --- ./arch/ppc/Kconfig.arkcfg 2006-07-10 12:39:10.000000000 +0400 > +++ ./arch/ppc/Kconfig 2006-08-10 17:56:13.000000000 +0400 > @@ -1414,6 +1414,8 @@ endmenu > > source "lib/Kconfig" > > +source "ub/Kconfig" > + > source "arch/powerpc/oprofile/Kconfig" > > source "arch/ppc/Kconfig.debug" > --- ./arch/sparc/Kconfig.arkcfg 2006-04-21 11:59:32.000000000 +0400 > +++ ./arch/sparc/Kconfig 2006-08-10 17:56:24.000000000 +0400 > @@ -296,3 +296,5 @@ source "security/Kconfig" > source "crypto/Kconfig" > > source "lib/Kconfig" > + > +source "ub/Kconfig" > --- ./arch/sparc64/Kconfig.arkcfg 2006-07-17 17:01:11.000000000 +0400 > +++ ./arch/sparc64/Kconfig 2006-08-10 17:56:36.000000000 +0400 > @@ -432,3 +432,5 @@ source "security/Kconfig" > source "crypto/Kconfig" > > source "lib/Kconfig" > + > +source "lib/Kconfig" > --- ./arch/x86_64/Kconfig.ubkm 2006-07-10 12:39:11.000000000 +0400 > +++ ./arch/x86_64/Kconfig 2006-07-28 14:10:49.000000000 +0400 > @@ -655,3 +655,5 @@ source "security/Kconfig" > source "crypto/Kconfig" > > source "lib/Kconfig" > + > +source "kernel/ub/Kconfig" > --- ./kernel/ub/Kconfig.ubkm 2006-07-28 13:07:38.000000000 +0400 > +++ ./kernel/ub/Kconfig 2006-07-28 13:09:51.000000000 +0400 > @@ -0,0 +1,25 @@ > +# > +# User resources part (UBC) > +# > +# Copyright (C) 2006 OpenVZ. SWsoft Inc > + > +menu "User resources" > + > +config USER_RESOURCE > + bool "Enable user resource accounting" > + default y > + help > + This patch provides accounting and allows to configure > + limits for user's consumption of exhaustible system resources. > + The most important resource controlled by this patch is unswappable > + memory (either mlock'ed or used by internal kernel structures and > + buffers). The main goal of this patch is to protect processes > + from running short of important resources because of an accidental > + misbehavior of processes or malicious activity aiming to ``kill'' > + the system. It's worth to mention that resource limits configured > + by setrlimit(2) do not give an acceptable level of protection > + because they cover only small fraction of resources and work on a > + per-process basis. Per-process accounting doesn't prevent malicious > + users from spawning a lot of resource-consuming processes. > + > +endmenu > > ------------------------------------------------------------------------- > Using Tomcat but need to do more? Need to support web services, security? > Get stuff done quickly with pre-integrated technology to make your job easier > Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 > _______________________________________________ > ckrm-tech mailing list > https://lists.sourceforge.net/lists/listinfo/ckrm-tech -- ---------------------------------------------------------------------- Chandra Seetharaman | Be careful what you choose.... - sekharan@us.ibm.com | .......you may get it. ----------------------------------------------------------------------