httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Ben Laurie <...@algroup.co.uk>
Subject Re: SYSV Semaphores.
Date Sun, 10 Dec 2000 22:55:01 GMT
"Victor J. Orlikowski" wrote:
> 
> Ryan,
> 
> I'm looking into the use of SysV sems, for performance reasons. The
> reason we shut down on using them in 1.3 was the possibility of a
> denial-of-service using CGIs. However, after bothering Dean about it
> when he suggested their use on Linux, it appears that there are a
> couple of other ways to perform a denial of service using CGIs and the
> other locking methods, so the sems didn't look so bad, considering the
> performance boost they gave over flock. However, some measures seem to
> give conflicting results about the performance gain, so I am doing my
> own measurements now.

Hmmm ... don't remember that, but if that's the only reason, I say we
have a HOSTILE_CGI compilation mode to avoid them, coz it isn't usually
something we need to guard against.

Roll on a decent secure OS!

Cheers,

Ben.

Mime
View raw message