[DGD] Why use callouts in klib to increment resources?

Raymond Jennings shentino at gmail.com
Sun Oct 21 23:23:57 CEST 2018


I meant if the admin imposes a quota.

Are you sure that no checks are performed though?

If I'm not mistaken there does appear to be code present in
/kernel/sys/rsrcd and /kernel/obj/rsrc to enforce that quota, via
checks performed during call_limited.

I just ran a test against your version and it does in fact cause "out
of ticks" errors once someone's quota has been exhausted.
On Sun, Oct 21, 2018 at 8:42 AM Felix A. Croes <felix at dworkin.nl> wrote:
>
> Raymond Jennings <shentino at gmail.com> wrote:
>
> > Any concerns about causing a DoS by evading a "tick usage" quota?  The
> > tick updates don't update this resource (and thus trigger a new
> > rlimits check) immediately.
>
> The "tick usage" resource doesn't have a quota, and no checks are
> performed for it.
>
> Regards,
> Felix Croes
> ____________________________________________
> https://mail.dworkin.nl/mailman/listinfo/dgd



More information about the DGD mailing list