Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtp (Exim 4.80) (envelope-from ) id 1WuNqv-0001cT-0l for pgsql-hackers@arkaria.postgresql.org; Tue, 10 Jun 2014 15:20:45 +0000 Received: from localhost ([127.0.0.1] helo=postgresql.org) by malur.postgresql.org with smtp (Exim 4.80) (envelope-from ) id 1WuNqu-0004BH-Gv for pgsql-hackers@arkaria.postgresql.org; Tue, 10 Jun 2014 15:20:44 +0000 Received: from makus.postgresql.org ([2001:4800:1501:1::229]) by malur.postgresql.org with esmtps (TLS1.2:DHE_RSA_AES_256_CBC_SHA256:256) (Exim 4.80) (envelope-from ) id 1WuNqt-0004B5-7L for pgsql-hackers@postgresql.org; Tue, 10 Jun 2014 15:20:43 +0000 Received: from sss.pgh.pa.us ([66.207.139.130]) by makus.postgresql.org with esmtps (TLS1.2:DHE_RSA_AES_256_CBC_SHA256:256) (Exim 4.80) (envelope-from ) id 1WuNqm-0007WD-IG for pgsql-hackers@postgresql.org; Tue, 10 Jun 2014 15:20:41 +0000 Received: from sss1.sss.pgh.pa.us (localhost [127.0.0.1]) by sss.pgh.pa.us (8.14.4/8.14.4) with ESMTP id s5AFKSUG030710; Tue, 10 Jun 2014 11:20:28 -0400 From: Tom Lane To: Andres Freund cc: Gurjeet Singh , Peter Eisentraut , PGSQL Hackers Subject: Re: /proc/self/oom_adj is deprecated in newer Linux kernels In-reply-to: <20140610150933.GK8406@alap3.anarazel.de> References: <29121.1316185073@sss.pgh.pa.us> <1316355543.12186.9.camel@vanquo.pezone.net> <15953.1316362868@sss.pgh.pa.us> <1316420754.14001.3.camel@fsopti579.F-Secure.com> <16241.1316441883@sss.pgh.pa.us> <20140610143202.GI8406@alap3.anarazel.de> <30402.1402412692@sss.pgh.pa.us> <20140610150933.GK8406@alap3.anarazel.de> Comments: In-reply-to Andres Freund message dated "Tue, 10 Jun 2014 17:09:33 +0200" Date: Tue, 10 Jun 2014 11:20:28 -0400 Message-ID: <30709.1402413628@sss.pgh.pa.us> X-Pg-Spam-Score: -2.6 (--) List-Archive: List-Help: List-ID: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: X-Mailing-List: pgsql-hackers Precedence: bulk Sender: pgsql-hackers-owner@postgresql.org Andres Freund writes: > On 2014-06-10 11:04:52 -0400, Tom Lane wrote: >> But anyway, yeah, the point of this feature is that the OOM priority >> of the postmaster, and *only* the postmaster, should be raised. Allowing >> unprivileged people to break that is not attractive on any level. > A superuser could already write a function that echoes into /proc? Maybe I'm mistaken, but I thought once the fork_process code has reset our process's setting to zero it's not possible to lower it again (without privileges we'd not have). regards, tom lane -- Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-hackers