Bug 163203 – net-misc/openssh - add parameter to disable oom-killer for sshd

• Status: RESOLVED WONTFIX
• Product: Gentoo Linux

[Description Marcin Lewandowski 2007-01-22 09:08:20 UTC]

Last DDoS on my server caused me to think about security. Flooding my server caused out-of-memory and mysqld was killed. I thought it's good to prevent killing processes in random way, especially sshd. When you have remote machine and kernel will decide to kill sshd you lost last way to do something.

Attached files contain config file for sshd initscript with parameter that allows user to enable or disable passing variable that disables oom-killer to /proc/SSHD_PID/oom_adj and modified initscript.

Reproducible: Sometimes

[Comment 1 Marcin Lewandowski 2007-01-22 09:09:32 UTC]

Created attachment 107765 [details]
/etc/conf.d/sshd

[Comment 2 Marcin Lewandowski 2007-01-22 09:09:51 UTC]

Created attachment 107766 [details]
/etc/init.d/sshd

[Comment 3 Jakub Moc (RETIRED) 2007-01-22 09:13:54 UTC]

Please, stop attaching these bogus references to third-party pages. Reopen once you've attached the real thing.

[Comment 4 Marcin Lewandowski 2007-01-23 19:58:04 UTC]

Created attachment 107928 [details]
/etc/conf.d/sshd

[Comment 5 Marcin Lewandowski 2007-01-23 19:58:31 UTC]

Created attachment 107930 [details]
/etc/init.d/sshd

[Comment 6 Marcin Lewandowski 2007-01-23 19:58:55 UTC]

Sorry, my fault.

[Comment 7 SpanKY 2007-01-23 21:40:38 UTC]

not terribly interested in including this ...