From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-8.5 required=3.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,FREEMAIL_FORGED_FROMDOMAIN,FREEMAIL_FROM, HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,MENTIONS_GIT_HOSTING, SPF_HELO_NONE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 53C12C43461 for ; Sun, 13 Sep 2020 07:26:29 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by mail.kernel.org (Postfix) with ESMTP id 189B120719 for ; Sun, 13 Sep 2020 07:26:28 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=pass (1024-bit key) header.d=gmx.net header.i=@gmx.net header.b="N8ep3FXJ" Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1725923AbgIMH0W (ORCPT ); Sun, 13 Sep 2020 03:26:22 -0400 Received: from mout.gmx.net ([212.227.17.21]:38885 "EHLO mout.gmx.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1725878AbgIMH0M (ORCPT ); Sun, 13 Sep 2020 03:26:12 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=gmx.net; s=badeba3b8450; t=1599981887; bh=99aKcspekjOIiE1dIohqbzZPMFeB5+r78KjmQ3fL2j4=; h=X-UI-Sender-Class:Date:From:To:Cc:Subject:References:In-Reply-To; b=N8ep3FXJadQHM/k2+U+dv6FDZEK9jpfHx0ugUcpFHNBc70+BI2NeHIlD9PdIvN3tO jtqn1a2SRKAK0TlJIJi5ncvgsgNqouVetGdsqHRzoH3Bi7gVFrn4uOHEFHGh0LXI5d z87gAdRHAw8wiDHB+vI4icH/8MGhI7qZxzo9Z5UY= X-UI-Sender-Class: 01bb95c1-4bf8-414a-932a-4f6e2808ef9c Received: from ubuntu ([79.150.73.70]) by mail.gmx.com (mrgmx105 [212.227.17.174]) with ESMTPSA (Nemesis) id 1N5G9t-1kgDPe1ERh-011Bo0; Sun, 13 Sep 2020 09:24:47 +0200 Date: Sun, 13 Sep 2020 09:24:30 +0200 From: John Wood To: Ondrej Mosnacek , Mel Gorman Cc: John Wood , James Morris , Kees Cook , Kernel Hardening , Matthew Wilcox , Jonathan Corbet , Alexander Viro , Ingo Molnar , Peter Zijlstra , Juri Lelli , Vincent Guittot , Dietmar Eggemann , Steven Rostedt , Ben Segall , Luis Chamberlain , Iurii Zaikin , "Serge E. Hallyn" , linux-doc@vger.kernel.org, Linux kernel mailing list , linux-fsdevel@vger.kernel.org, Linux Security Module list Subject: Re: [RESEND][RFC PATCH 0/6] Fork brute force attack mitigation (fbfam) Message-ID: <20200913072430.GA2965@ubuntu> References: <20200910202107.3799376-1-keescook@chromium.org> <202009120055.F6BF704620@keescook> <20200912093652.GA3041@ubuntu> <20200912144722.GE3117@suse.de> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: X-Provags-ID: V03:K1:HpjB457sek++T0MbqbEi/n5kjJ86x0yFV9KWAryC4ubpox1jgjg VhRcOhBqCFlvmiSB8zAdW7ExIiFFLQH2FyzB6cv6zQrzC5c7QJRatK3U46GjC5Sjh7ps9+j 3YUuXvIPhqD7LGRVrrRXL9xIcAEooZ51xs33Q315qVFIbiVNKQrjhLG2wJxOjPGDoKR+h3Z X01Sj46DS1qZ3aghTigCQ== X-UI-Out-Filterresults: notjunk:1;V03:K0:+ahVl6Hk4D0=:4DkSuUaUp/GpmbbXx0a5fY Nr0OswsR92f5hbCXbkyeWRAFAmZLBiEiSSbulOUa2GF3+XCEreCZ4u4t1oivK9baWhy4IEvZi fnzkkIYpGitZz2r2IDT5oDSsMU/Vyss0biL6Z3jSLsbAc+M+78/4j1b2PA3YkwiqmfLKgbRaW kSNxffYrTVnuoiHSstN5uagXLbSHziBRgGtuQbnt6ikv6vebMplwKDGEuUVJyHD+lOMuM5UMm B/b17RmOpbwkPYn9wjeXrikit/kPEmWRoGMjZFd9IU40CJmpghgpjgryKtA1VZon6Giz3P0aB rNZbl8S+ZqSANSNa7z9KzAMbbkO5XG+yimbo5X0CO8lbqj65rAVxlx2+h0CItKCWQenDl6pCd 7HGgM+YOggswf/f9X12fLXfW6CPeG69KCUfsLun+jyTFWFvAvvkKQNzpVR1y+oahcnW+Zmwfz QkuxtgrBmeLmLBHds5hqvQsngB1+8vv85z8R1Cwi5IrdaOotrVcs8IJY4Ukfc6T7qENVvss1q p3zWMZAlemjudQCn/DNi0aDkSEM+Cmayd08t3CFmoVJVAQ3nT0auLIiYxWwdUGY3pKwKUcE/W plWkRVA7rRLXg2+QBeyThhEuSt8a71+UmQw1azTZnv3SFw6YNnIx38uO+nZJQwNR3zkTZNWe6 b74XVLlN7BdbJ07tFi3CvXPoLU0W7og9yI9Jew9Luy1cOO6GQqY4H+Qkm20kLI95vutP8x5GZ Go/niXT0BNrW170DiZPrhHF5ffDGGKw2dj34+0fbQ7kJpdTSjN5JFI+PbYcQLr7pPyYhi1Za6 frkpdAHDdE3bRLRLtPFswdRCGSJyeulxQwCe5SuSAHWoyCbfaxQRua2Qq6HQj/KYE8S28J6tp w7z78KuIe/LTy6jDp58wr2FGgoxiJ70rUHDoq/imMMhAX1xupxqQFVGHQeBkQKeb3BjYJNEsF nnlt4Mq6a8JlUbwDew29H5BiwyJ0MRcCXfyvB1qi4R2ykQ+cGK45f0j3Z7NzkVZa21OmgoDC+ WB+g+msN76x6A6foMsaU39G/EDVfi3Ud3bK76wkePjl8Vu/CeMfKGSFCHSKook0xWpXgitVmi IoZQ7QOOIBUp/rXxxD0+RrderfNAmwHCWlbxHYTy0l/W2BdB2gAk/+Wet+ziC3U3QSsg0FWwV QTxURgAgpzBKBYeMtlNKl8ksGiAX7trszmMmuIdDt69E7Zz1e4/dnRIryo+wDFlsOXQKlPmbW HMqxy/K4V7kHlJ0Kx0iTJgmBQ5idPnjP/s4YjRA== Content-Transfer-Encoding: quoted-printable Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Hi, On Sat, Sep 12, 2020 at 10:48:39PM +0200, Ondrej Mosnacek wrote: > On Sat, Sep 12, 2020 at 4:51 PM Mel Gorman wrote: > > On Sat, Sep 12, 2020 at 11:36:52AM +0200, John Wood wrote: > > > On Sat, Sep 12, 2020 at 12:56:18AM -0700, Kees Cook wrote: > > > > On Sat, Sep 12, 2020 at 10:03:23AM +1000, James Morris wrote: > > > > > On Thu, 10 Sep 2020, Kees Cook wrote: > > > > > > > > > > > [kees: re-sending this series on behalf of John Wood > > > > > > also visible at https://github.com/johwood/linux fbfam] > > > > > > > > > > > > From: John Wood > > > > > > > > > > Why are you resending this? The author of the code needs to be a= ble to > > > > > send and receive emails directly as part of development and main= tenance. > > > > > > I tried to send the full patch serie by myself but my email got bloc= ked. After > > > get support from my email provider it told to me that my account is = young, > > > and due to its spam policie I am not allow, for now, to send a big a= mount > > > of mails in a short period. They also informed me that soon I will b= e able > > > to send more mails. The quantity increase with the age of the accoun= t. > > > > > > > If you're using "git send-email" then specify --confirm=3Dalways and > > either manually send a mail every few seconds or use an expect script > > like > > > > #!/bin/bash > > EXPECT_SCRIPT=3D > > function cleanup() { > > if [ "$EXPECT_SCRIPT" !=3D "" ]; then > > rm $EXPECT_SCRIPT > > fi > > } > > trap cleanup EXIT > > > > EXPECT_SCRIPT=3D`mktemp` > > cat > $EXPECT_SCRIPT < > spawn sh ./SEND > > expect { > > "Send this email" { sleep 10; exp_send y\\r; exp_continue } > > } > > EOF > > > > expect -f $EXPECT_SCRIPT > > exit $? > > > > This will work if your provider limits the rate mails are sent rather > > than the total amount. Yes, it seems to be what is happening. > ...or you could keep it simple and just pass "--batch-size 1 > --relogin-delay 10" to git send-email ;) Mel and Ondrej thanks a lot for the proposed solutions. I'm sure some of your solutions will be used soon. > -- > Ondrej Mosnacek > Software Engineer, Platform Security - SELinux kernel > Red Hat, Inc. Regards, John Wood From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-8.5 required=3.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,FREEMAIL_FORGED_FROMDOMAIN,FREEMAIL_FROM, HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,MENTIONS_GIT_HOSTING, SPF_HELO_NONE,SPF_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 5D985C433E2 for ; Sun, 13 Sep 2020 07:25:55 +0000 (UTC) Received: from mother.openwall.net (mother.openwall.net [195.42.179.200]) by mail.kernel.org (Postfix) with SMTP id B6E2220770 for ; Sun, 13 Sep 2020 07:25:53 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=pass (1024-bit key) header.d=gmx.net header.i=@gmx.net header.b="N8ep3FXJ" DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org B6E2220770 Authentication-Results: mail.kernel.org; dmarc=none (p=none dis=none) header.from=gmx.com Authentication-Results: mail.kernel.org; spf=pass smtp.mailfrom=kernel-hardening-return-19891-kernel-hardening=archiver.kernel.org@lists.openwall.com Received: (qmail 19797 invoked by uid 550); 13 Sep 2020 07:25:45 -0000 Mailing-List: contact kernel-hardening-help@lists.openwall.com; run by ezmlm Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-ID: Received: (qmail 19775 invoked from network); 13 Sep 2020 07:25:44 -0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=gmx.net; s=badeba3b8450; t=1599981887; bh=99aKcspekjOIiE1dIohqbzZPMFeB5+r78KjmQ3fL2j4=; h=X-UI-Sender-Class:Date:From:To:Cc:Subject:References:In-Reply-To; b=N8ep3FXJadQHM/k2+U+dv6FDZEK9jpfHx0ugUcpFHNBc70+BI2NeHIlD9PdIvN3tO jtqn1a2SRKAK0TlJIJi5ncvgsgNqouVetGdsqHRzoH3Bi7gVFrn4uOHEFHGh0LXI5d z87gAdRHAw8wiDHB+vI4icH/8MGhI7qZxzo9Z5UY= X-UI-Sender-Class: 01bb95c1-4bf8-414a-932a-4f6e2808ef9c Date: Sun, 13 Sep 2020 09:24:30 +0200 From: John Wood To: Ondrej Mosnacek , Mel Gorman Cc: John Wood , James Morris , Kees Cook , Kernel Hardening , Matthew Wilcox , Jonathan Corbet , Alexander Viro , Ingo Molnar , Peter Zijlstra , Juri Lelli , Vincent Guittot , Dietmar Eggemann , Steven Rostedt , Ben Segall , Luis Chamberlain , Iurii Zaikin , "Serge E. Hallyn" , linux-doc@vger.kernel.org, Linux kernel mailing list , linux-fsdevel@vger.kernel.org, Linux Security Module list Subject: Re: [RESEND][RFC PATCH 0/6] Fork brute force attack mitigation (fbfam) Message-ID: <20200913072430.GA2965@ubuntu> References: <20200910202107.3799376-1-keescook@chromium.org> <202009120055.F6BF704620@keescook> <20200912093652.GA3041@ubuntu> <20200912144722.GE3117@suse.de> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: X-Provags-ID: V03:K1:HpjB457sek++T0MbqbEi/n5kjJ86x0yFV9KWAryC4ubpox1jgjg VhRcOhBqCFlvmiSB8zAdW7ExIiFFLQH2FyzB6cv6zQrzC5c7QJRatK3U46GjC5Sjh7ps9+j 3YUuXvIPhqD7LGRVrrRXL9xIcAEooZ51xs33Q315qVFIbiVNKQrjhLG2wJxOjPGDoKR+h3Z X01Sj46DS1qZ3aghTigCQ== X-UI-Out-Filterresults: notjunk:1;V03:K0:+ahVl6Hk4D0=:4DkSuUaUp/GpmbbXx0a5fY Nr0OswsR92f5hbCXbkyeWRAFAmZLBiEiSSbulOUa2GF3+XCEreCZ4u4t1oivK9baWhy4IEvZi fnzkkIYpGitZz2r2IDT5oDSsMU/Vyss0biL6Z3jSLsbAc+M+78/4j1b2PA3YkwiqmfLKgbRaW kSNxffYrTVnuoiHSstN5uagXLbSHziBRgGtuQbnt6ikv6vebMplwKDGEuUVJyHD+lOMuM5UMm B/b17RmOpbwkPYn9wjeXrikit/kPEmWRoGMjZFd9IU40CJmpghgpjgryKtA1VZon6Giz3P0aB rNZbl8S+ZqSANSNa7z9KzAMbbkO5XG+yimbo5X0CO8lbqj65rAVxlx2+h0CItKCWQenDl6pCd 7HGgM+YOggswf/f9X12fLXfW6CPeG69KCUfsLun+jyTFWFvAvvkKQNzpVR1y+oahcnW+Zmwfz QkuxtgrBmeLmLBHds5hqvQsngB1+8vv85z8R1Cwi5IrdaOotrVcs8IJY4Ukfc6T7qENVvss1q p3zWMZAlemjudQCn/DNi0aDkSEM+Cmayd08t3CFmoVJVAQ3nT0auLIiYxWwdUGY3pKwKUcE/W plWkRVA7rRLXg2+QBeyThhEuSt8a71+UmQw1azTZnv3SFw6YNnIx38uO+nZJQwNR3zkTZNWe6 b74XVLlN7BdbJ07tFi3CvXPoLU0W7og9yI9Jew9Luy1cOO6GQqY4H+Qkm20kLI95vutP8x5GZ Go/niXT0BNrW170DiZPrhHF5ffDGGKw2dj34+0fbQ7kJpdTSjN5JFI+PbYcQLr7pPyYhi1Za6 frkpdAHDdE3bRLRLtPFswdRCGSJyeulxQwCe5SuSAHWoyCbfaxQRua2Qq6HQj/KYE8S28J6tp w7z78KuIe/LTy6jDp58wr2FGgoxiJ70rUHDoq/imMMhAX1xupxqQFVGHQeBkQKeb3BjYJNEsF nnlt4Mq6a8JlUbwDew29H5BiwyJ0MRcCXfyvB1qi4R2ykQ+cGK45f0j3Z7NzkVZa21OmgoDC+ WB+g+msN76x6A6foMsaU39G/EDVfi3Ud3bK76wkePjl8Vu/CeMfKGSFCHSKook0xWpXgitVmi IoZQ7QOOIBUp/rXxxD0+RrderfNAmwHCWlbxHYTy0l/W2BdB2gAk/+Wet+ziC3U3QSsg0FWwV QTxURgAgpzBKBYeMtlNKl8ksGiAX7trszmMmuIdDt69E7Zz1e4/dnRIryo+wDFlsOXQKlPmbW HMqxy/K4V7kHlJ0Kx0iTJgmBQ5idPnjP/s4YjRA== Content-Transfer-Encoding: quoted-printable Hi, On Sat, Sep 12, 2020 at 10:48:39PM +0200, Ondrej Mosnacek wrote: > On Sat, Sep 12, 2020 at 4:51 PM Mel Gorman wrote: > > On Sat, Sep 12, 2020 at 11:36:52AM +0200, John Wood wrote: > > > On Sat, Sep 12, 2020 at 12:56:18AM -0700, Kees Cook wrote: > > > > On Sat, Sep 12, 2020 at 10:03:23AM +1000, James Morris wrote: > > > > > On Thu, 10 Sep 2020, Kees Cook wrote: > > > > > > > > > > > [kees: re-sending this series on behalf of John Wood > > > > > > also visible at https://github.com/johwood/linux fbfam] > > > > > > > > > > > > From: John Wood > > > > > > > > > > Why are you resending this? The author of the code needs to be a= ble to > > > > > send and receive emails directly as part of development and main= tenance. > > > > > > I tried to send the full patch serie by myself but my email got bloc= ked. After > > > get support from my email provider it told to me that my account is = young, > > > and due to its spam policie I am not allow, for now, to send a big a= mount > > > of mails in a short period. They also informed me that soon I will b= e able > > > to send more mails. The quantity increase with the age of the accoun= t. > > > > > > > If you're using "git send-email" then specify --confirm=3Dalways and > > either manually send a mail every few seconds or use an expect script > > like > > > > #!/bin/bash > > EXPECT_SCRIPT=3D > > function cleanup() { > > if [ "$EXPECT_SCRIPT" !=3D "" ]; then > > rm $EXPECT_SCRIPT > > fi > > } > > trap cleanup EXIT > > > > EXPECT_SCRIPT=3D`mktemp` > > cat > $EXPECT_SCRIPT < > spawn sh ./SEND > > expect { > > "Send this email" { sleep 10; exp_send y\\r; exp_continue } > > } > > EOF > > > > expect -f $EXPECT_SCRIPT > > exit $? > > > > This will work if your provider limits the rate mails are sent rather > > than the total amount. Yes, it seems to be what is happening. > ...or you could keep it simple and just pass "--batch-size 1 > --relogin-delay 10" to git send-email ;) Mel and Ondrej thanks a lot for the proposed solutions. I'm sure some of your solutions will be used soon. > -- > Ondrej Mosnacek > Software Engineer, Platform Security - SELinux kernel > Red Hat, Inc. Regards, John Wood