[Users] Re: Security risks in ve_allow_kthreads

[Jakob Goldbach]

On Wed, 2008-01-09 at 10:27 +0300, vaverin wrote:
> 
>  When VE is stopped all processes should be finished. Userspace processes can be killed, but kernel threads cannot be stopped by this way.

Okay. 

> You should have some guarantee that your kernel therads will be stopped by some way when VE is stopped. Otherwise you will have at least memory leakage.
> 

My kernel threads is from the Lustre filesystem which I mount ind the VE
after the VE has started. Unmounting this should stop the thread so I
should be in the clear. 

Thanks
/Jakob