[haiku-bugs] Re: [Haiku] #16610: app_server: crash when running application from another user
- From: "Haiku" <trac@xxxxxxxxxxxx>
- To: undisclosed-recipients: ;
- Date: Fri, 20 Nov 2020 15:20:09 -0000
#16610: app_server: crash when running application from another user
---------------------------------+----------------------------
Reporter: X512 | Owner: axeld
Type: bug | Status: new
Priority: normal | Milestone: Unscheduled
Component: Servers/app_server | Version: R1/Development
Resolution: | Keywords:
Blocked By: | Blocking:
Platform: All |
---------------------------------+----------------------------
Comment (by waddlesplash):
I see no reason of spending time for major refactor of already working
code.
Because I really think that when you add up all the smaller issues, it
simply makes more sense to go the multi-process route. Take the security
aspect for instance: besides potentially leaking data between users, it is
also the case that the attack surface in app_server is just massive.
Having app_server run as each individual user means that an exploit in it
will not really gain a user anything in particular, whereas an exploit to
a root app_server would result in privilege escalation, etc.
Or, there is the aspect of memory usage: on 32-bit systems, it is possible
to exhaust app_server's virtual memory space without exhausting physical
memory (even without PAE). Under heavy use, it is theoretically to
fragment the address space so heavily that despite having plenty free,
there is no way to allocate a large enough chunk. This rarely if ever
occurs now, but with multiple users, it will be far easier to trigger; and
32-bit is hardly a dead architecture.
There are plenty of other concerns, too. I think when you add all these
up, the benefit from a multiprocess app_server is just far greater than
the few MB of memory usage saved by sharing some data. (Or, for that
matter, we could even retain that memory sharing in a multiprocess
app_server.)
--
Ticket URL: <
https://dev.haiku-os.org/ticket/16610#comment:17>
Haiku <
https://dev.haiku-os.org>
The Haiku operating system.
Other related posts:
