|
From: Jeremy F. <je...@go...> - 2004-03-02 00:58:53
|
On Mon, 2004-03-01 at 16:28, Dirk Mueller wrote: > On Tuesday 02 March 2004 00:53, Jeremy Fitzhardinge wrote: > > > Ah, OK. Does this help, or do you also set the hard limit? > > hard limit is set as well. do we really need that much mapped memory? Yes. At the very least, stage1 needs to reserve the chunks of the address space needed for the client, before running the dynamic linker. Since the dynamic linker is unmodified glibc code, we can't control where it will place things, so we need to force its hand. The other large mappings (like the shadow memory region) aren't really necessary, but they make inspecting things with /proc/<pid>/maps much easier. What's the purpose of your virtual limits. Is it to stop runaways, or actual malicious resource use? J |