CONFIG_CGROUP_PIDS: PIDs controller

General informations

The Linux kernel configuration item CONFIG_CGROUP_PIDS has multiple definitions:

PIDs controller found in init/Kconfig

The configuration item CONFIG_CGROUP_PIDS:

• prompt: PIDs controller
• type: bool
• depends on: (none)
• defined in init/Kconfig
• found in Linux kernels: 4.5–4.20, 5.0–5.19, 6.0–6.14, 6.15-rc+HEAD

Help text

Provides enforcement of process number limits in the scope of a cgroup. Any attempt to fork more processes than is allowed in the cgroup will fail. PIDs are fundamentally a global resource because it is fairly trivial to reach PID exhaustion before you reach even a conservative kmemcg limit. As a result, it is possible to grind a system to halt without being limited by other cgroup policies. The PIDs controller is designed to stop this from happening.

It should be noted that organisational operations (such as attaching to a cgroup hierarchy) will *not* be blocked by the PIDs controller, since the PIDs limit only affects a process's ability to fork, not to attach to a cgroup.

PIDs cgroup subsystem found in init/Kconfig

The configuration item CONFIG_CGROUP_PIDS:

• prompt: PIDs cgroup subsystem
• type: bool
• depends on: (none)
• defined in init/Kconfig
• found in Linux kernels: 4.3–4.4

Help text

Provides enforcement of process number limits in the scope of a cgroup. Any attempt to fork more processes than is allowed in the cgroup will fail. PIDs are fundamentally a global resource because it is fairly trivial to reach PID exhaustion before you reach even a conservative kmemcg limit. As a result, it is possible to grind a system to halt without being limited by other cgroup policies. The PIDs cgroup subsystem is designed to stop this from happening.

It should be noted that organisational operations (such as attaching to a cgroup hierarchy will *not* be blocked by the PIDs subsystem), since the PIDs limit only affects a process's ability to fork, not to attach to a cgroup.

Hardware

LKDDb

Raw data from LKDDb:

• (none)

Sources

This page is automaticly generated with free (libre, open) software lkddb(see lkddb-sources).

The data is retrived from:

• Linux kernel
• Linux Kernel Driver DataBase (LKDDb)

Automatic links from Google (and ads)

Custom Search

Popular queries: