On Wed, 22 Jan 2020 09:28:53 +0100 Michal Hocko <mhocko@xxxxxxxxxx> wrote: > On Tue 21-01-20 10:32:12, Minchan Kim wrote: > > On Mon, Jan 20, 2020 at 08:58:25AM +0100, Michal Hocko wrote: > [...] > > > The interface really has to be robust to future potential usecases. > > > > I do understand your concern but for me, it's chicken and egg problem. > > We usually do best effort to make something perfect as far as possible > > but we also don't do over-engineering without real usecase from the > > beginning. > > > > I already told you how we could synchronize among processes and potential > > way to be extended Daniel suggested(That's why current API has extra field > > for the cookie) even though we don't need it right now. > > If you can synchronize with the target task then you do not need a > remote interface. Just use ptrace and you are done with it. > > > If you want to suggest the other way, please explain why your idea is > > better and why we need it at this moment. > > I believe I have explained my concerns and why they matter. All you are > saying is that you do not care because your particular usecase doesn't > care. And that is a first signal of a future disaster when we end up > with a broken and unfixable interface we have to maintain for ever. > > I will not go as far as to nack this but you should seriously think > about other potential usecases and how they would work and what we are > going to do when a first non-cooperative userspace memory management > usecase materializes. Beside of the specific environment of Android, I think there are many ways to know the address space layout and access patterns of other processes. The idle_page_tracking might be an example that widelay available. Of course, the information might not strictly correct due to the timing issue, but could be still worth to be used under some extreme situations, such as memory pressure or fragmentation. For the same reason, ptrace() would not be sufficient, as we have no perfect control, but only some level of control that would be useful under specific situations. I assume the users of this systemcall would understand the tradeoff and make decisions. Also, as the users already have the right to do the tradeoff, I think it's fair. In other words, I think the caller has both the power and the responsibility to deal with the time-to-check-time-to-react problem. Nonetheless, I also agree this is important concern and the patch would be better if it adds more detailed documentation regarding this issue. If I'm missing some points or you have different opinions, please let me know. Thanks, SeongJae Park > -- > Michal Hocko > SUSE Labs >
