From: Oleg Drokin <green@namesys.com>
To: Nikita Danilov <Nikita@Namesys.COM>
Cc: Reiserfs mail-list <Reiserfs-List@Namesys.COM>
Subject: Re: Reserved Blocks
Date: Mon, 16 Sep 2002 17:41:09 +0400 [thread overview]
Message-ID: <20020916174109.A21027@namesys.com> (raw)
In-Reply-To: <15749.56464.253411.12957@laputa.namesys.com>
Hello!
On Mon, Sep 16, 2002 at 05:15:20PM +0400, Nikita Danilov wrote:
> What I thought about is adding new mount option -o root_blk=1000, and
> adding one `if' statement to the
> fs/reiserfs/bitmap.c:reiserfs_allocate_blocknrs().
Actually two mount options. Or even three.
One option is to specify uid for whom to reserve. Or may be not uid but gid,
too.
> Also, if there are not enough free blocks at the -mount- time---issue a
> warning. What about this? Oleg?
Sounds easy enough.
But is easily defeated, unfortunatelly.
Since the spans across already allocated blocks without any control,
the only moment root-owned process makes tree to occupy one more block to
create some directory, for example, malicious process immediately writes
file tail into that free space...
> > > > Is this essential UNIX filesystem feature implemented?
> > > Well, nobody asked for it yet. :)
> > Allow me to ask on behalf of all the SysAdmins out there. This is an
> > extremely useful standard safeguard against users filling up /var (or,
No. It does not work, I think. Well, it works, but can be easily defeated.
E.g. if I need to overflow your partition where logs are stored, I'd do someting
like that:
while :; do cat /etc/passwd | logger -t nobody ; done
Repeat with different -p swithces if you have several filesystems for different
logs.
Also consider there is set uid application that outputs data.
I just do setuid_app >>/fs_to_fill/somefile
and repeat it that much times to fill the fs.
So this protection you are asking for is mostly imagenary.
> > Perhaps you should have a section in your FAQ that covers
> > standard/traditional filesystem features not present in ReiserFS, or
> > at what kernel version they were merged in - eg 2.4.19pre3 for inode
> > attributes, and not yet for Filesystem Quotas or SuperUser Reserved
> > Blocks percentage.
FS quotas are implemented. Link to URL is in our FAQ.
Bye,
Oleg
next prev parent reply other threads:[~2002-09-16 13:41 UTC|newest]
Thread overview: 21+ messages / expand[flat|nested] mbox.gz Atom feed top
2002-09-16 10:27 Reserved Blocks Sam Vilain
2002-09-16 10:32 ` Oleg Drokin
2002-09-16 10:48 ` Nikita Danilov
[not found] ` <20020916125116.B8E96297C@hofmann.snowcra.sh>
2002-09-16 13:15 ` Nikita Danilov
2002-09-16 13:41 ` Oleg Drokin [this message]
2002-09-25 18:07 ` Paul Jarc
2002-09-26 6:19 ` Oleg Drokin
2002-09-26 6:55 ` Matthias Urlichs
2002-09-26 7:02 ` Oleg Drokin
2002-09-26 7:59 ` Matthias Urlichs
2002-09-26 8:03 ` Oleg Drokin
2002-09-26 8:05 ` Matthias Urlichs
[not found] ` <15749.55656.692129.840162@laputa.namesys.com>
2002-09-16 14:00 ` Sam Vilain
2002-09-16 14:50 ` Valdis.Kletnieks
2002-09-16 16:14 ` Sam Vilain
2002-09-16 16:48 ` Russell Coker
[not found] ` <200209161651.g8GGpKM4005169@turing-police.cc.vt.edu>
2002-09-17 17:39 ` Sam Vilain
[not found] ` <200209161713.52352.russell@coker.com.au>
2002-09-16 15:35 ` Valdis.Kletnieks
2002-09-16 15:44 ` Russell Coker
2002-09-16 16:23 ` Sam Vilain
2002-09-16 16:43 ` Russell Coker
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20020916174109.A21027@namesys.com \
--to=green@namesys.com \
--cc=Nikita@Namesys.COM \
--cc=Reiserfs-List@Namesys.COM \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.