NuxiNL/cloudabi

Fork bombs

Opened this issue · 1 comments

(I realize the project is unmaintained, but I'll mention this anyway.)

CloudABI claims that programs that use it have no effect on global resources, so that they can safely be run without a container, VM, or other enclosure mechanism. However, fork bombs are still possible. (Tl;dr: a process forks, and then each child process forks, and then ...)

Sure. Programs could also consume 100% cpu, consume lots of memory, try to open billions of file descriptors, etc. Limiting these kind of things is up to the operating system, not the abi. (E.g. through setrlimit.)