From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-8.8 required=3.0 tests=BAYES_00,DKIMWL_WL_HIGH, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS, MAILING_LIST_MULTI,MENTIONS_GIT_HOSTING,SPF_HELO_NONE,SPF_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 25687C433E2 for ; Sat, 12 Sep 2020 20:49:11 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by mail.kernel.org (Postfix) with ESMTP id CC797207EA for ; Sat, 12 Sep 2020 20:49:10 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=pass (1024-bit key) header.d=redhat.com header.i=@redhat.com header.b="dr0Ce72Z" Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1725885AbgILUtH (ORCPT ); Sat, 12 Sep 2020 16:49:07 -0400 Received: from us-smtp-delivery-124.mimecast.com ([63.128.21.124]:25418 "EHLO us-smtp-delivery-124.mimecast.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1725906AbgILUtA (ORCPT ); Sat, 12 Sep 2020 16:49:00 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1599943737; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=cJuHYlMJJGIC0qBjlrqnGCpyE1IZMKKDiH+/8N+tl5c=; b=dr0Ce72Zjyh5SeDxwKvFw4/m19xObHSL43mDbzO+s7revoyWKKXwlq0IY0uNdFBtynqS7+ +8klonsDyYpwtdJshU07+r1pbtmiutmK7sGN9COiJxZdxJ1wrsu8qZUgFCtDVTNVUNJSSX NWJmUnANjHfzUCxNxI/5uGqTukRwVWY= Received: from mail-lf1-f72.google.com (mail-lf1-f72.google.com [209.85.167.72]) (Using TLS) by relay.mimecast.com with ESMTP id us-mta-188-GZbPpo10O2CUDcx9b2Qy4A-1; Sat, 12 Sep 2020 16:48:54 -0400 X-MC-Unique: GZbPpo10O2CUDcx9b2Qy4A-1 Received: by mail-lf1-f72.google.com with SMTP id z77so1529967lfc.2 for ; Sat, 12 Sep 2020 13:48:53 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=cJuHYlMJJGIC0qBjlrqnGCpyE1IZMKKDiH+/8N+tl5c=; b=IXf9Bje71aF//jqMA+3fP7/X1Ub/VIOB9Y9l42kXoyg+WsuiRv0AeFFzGRG7qqIChz 3zkEmALKQi60GqfDIPlCoeWbVpP3bwqC5bX6B074gTZ5hIhvKxTqFtQaKPN1geJ5/dLB VfNrMW/I/KVSN4rOvj4pV+JhaVWFnoXIwxetB6+UtunxaWGOl0sg8nQ3ohVJ6o+SobFJ 45dHhWwlBvNs/KVT44cIuTUyDVVyerZ2rx2kCiOEBgELU39fCK34hQR6j50ZJBD5GZz8 rEwAYIse+lCnqeutPHV2Gqy8cb+hR6xA7dFBhy+PskKZdhSh/ZZsw2vx0Yly542j8Zxf v+rA== X-Gm-Message-State: AOAM533gxybsLEpYzTATl82IduboEzhTnq84Oo3lIIFPqSh1hc/BRuAU AKcN3nf60MPmoPP6ZpvhBI9xmQ1zAbUM8gbXLzW160IzQPuV9WAcP734vKkIN+wQTL8NcV1qDow U6kKZvMUp9db933A063fZ4vtX5bFrl0srXPmRipQnv+8OFYa/r9/6 X-Received: by 2002:a2e:8046:: with SMTP id p6mr2567815ljg.372.1599943732616; Sat, 12 Sep 2020 13:48:52 -0700 (PDT) X-Google-Smtp-Source: ABdhPJyDE6x8wpSTW0zchyo7JE5ZtuT3H92rSVgfacoMie83rLd05GidX9QR1xfHp5MvqzE7vmFLBF7QNJ6Y0VNPIQs= X-Received: by 2002:a2e:8046:: with SMTP id p6mr2567810ljg.372.1599943732385; Sat, 12 Sep 2020 13:48:52 -0700 (PDT) MIME-Version: 1.0 References: <20200910202107.3799376-1-keescook@chromium.org> <202009120055.F6BF704620@keescook> <20200912093652.GA3041@ubuntu> <20200912144722.GE3117@suse.de> In-Reply-To: <20200912144722.GE3117@suse.de> From: Ondrej Mosnacek Date: Sat, 12 Sep 2020 22:48:39 +0200 Message-ID: Subject: Re: [RESEND][RFC PATCH 0/6] Fork brute force attack mitigation (fbfam) To: Mel Gorman Cc: John Wood , James Morris , Kees Cook , Kernel Hardening , Matthew Wilcox , Jonathan Corbet , Alexander Viro , Ingo Molnar , Peter Zijlstra , Juri Lelli , Vincent Guittot , Dietmar Eggemann , Steven Rostedt , Ben Segall , Luis Chamberlain , Iurii Zaikin , "Serge E. Hallyn" , linux-doc@vger.kernel.org, Linux kernel mailing list , linux-fsdevel@vger.kernel.org, Linux Security Module list Authentication-Results: relay.mimecast.com; auth=pass smtp.auth=CUSA124A263 smtp.mailfrom=omosnace@redhat.com X-Mimecast-Spam-Score: 0.002 X-Mimecast-Originator: redhat.com Content-Type: text/plain; charset="UTF-8" Sender: owner-linux-security-module@vger.kernel.org Precedence: bulk List-ID: On Sat, Sep 12, 2020 at 4:51 PM Mel Gorman wrote: > On Sat, Sep 12, 2020 at 11:36:52AM +0200, John Wood wrote: > > On Sat, Sep 12, 2020 at 12:56:18AM -0700, Kees Cook wrote: > > > On Sat, Sep 12, 2020 at 10:03:23AM +1000, James Morris wrote: > > > > On Thu, 10 Sep 2020, Kees Cook wrote: > > > > > > > > > [kees: re-sending this series on behalf of John Wood > > > > > also visible at https://github.com/johwood/linux fbfam] > > > > > > > > > > From: John Wood > > > > > > > > Why are you resending this? The author of the code needs to be able to > > > > send and receive emails directly as part of development and maintenance. > > > > I tried to send the full patch serie by myself but my email got blocked. After > > get support from my email provider it told to me that my account is young, > > and due to its spam policie I am not allow, for now, to send a big amount > > of mails in a short period. They also informed me that soon I will be able > > to send more mails. The quantity increase with the age of the account. > > > > If you're using "git send-email" then specify --confirm=always and > either manually send a mail every few seconds or use an expect script > like > > #!/bin/bash > EXPECT_SCRIPT= > function cleanup() { > if [ "$EXPECT_SCRIPT" != "" ]; then > rm $EXPECT_SCRIPT > fi > } > trap cleanup EXIT > > EXPECT_SCRIPT=`mktemp` > cat > $EXPECT_SCRIPT < spawn sh ./SEND > expect { > "Send this email" { sleep 10; exp_send y\\r; exp_continue } > } > EOF > > expect -f $EXPECT_SCRIPT > exit $? > > This will work if your provider limits the rate mails are sent rather > than the total amount. ...or you could keep it simple and just pass "--batch-size 1 --relogin-delay 10" to git send-email ;) -- Ondrej Mosnacek Software Engineer, Platform Security - SELinux kernel Red Hat, Inc.