syslogd(8) with OOM Killer protection

[Marcelo Araujo]

On Jan 28, 2016 3:32 AM, "Mark Felder" <feld at freebsd.org> wrote:
>
>
>
> On Wed, Jan 27, 2016, at 04:35, Jan Bramkamp wrote:
> >
> > I would prefer to implement the a flag keeping cron (and all other base
> > system daemons) from double-forking and run it under a process
> > supervisor like daemontools.
> >
>
> There are complications preventing this from being possible in a clean
> way with rc.subr (stop/status/etc will break), but if we were able to
> solve them we could offer the ability to run anything we wanted under
> daemon(8) with the -r flag which will automatically supervise and
> restart the process if it dies.

The idea is protect against OOM kill. IMHO anything that has auto restart
can present a security issue to be exploited.

I'm a bit pragmatic, but supervises and restart a daemon without human
being intervention can create a security issue.

Best,

>
> --
>    Mark Felder
>   ports-secteam member
>   feld at FreeBSD.org
> _______________________________________________
> freebsd-hackers at freebsd.org mailing list
> https://lists.freebsd.org/mailman/listinfo/freebsd-hackers
> To unsubscribe, send any mail to "freebsd-hackers-unsubscribe at freebsd.org"