Bug 7577 - Web Access connections are not in the users' slices
Summary: Web Access connections are not in the users' slices
Status: NEW
Alias: None
Product: ThinLinc
Classification: Unclassified
Component: Web Access (show other bugs)
Version: trunk
Hardware: PC Unknown
: P2 Normal
Target Milestone: LowPrio
Assignee: Bugzilla mail exporter
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2020-10-27 14:35 CET by Pierre Ossman
Modified: 2021-03-09 13:00 CET (History)
1 user (show)

See Also:
Acceptance Criteria:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description Pierre Ossman cendio 2020-10-27 14:35:17 CET 
All Web Access connections are currently treated as part of the tlwebaccess service by systemd. This is mostly fine, but has some possible downsides as it means systemd doesn't associate the process with a user.

One obvious such downside is that the resource usage of the connection isn't counted towards the user. So any limits or balancing set up will not be enforced for this process.

For comparison sshd puts the processes in a new user session under the user slice. OTOH it does a full login, so it might not be a fair comparison.
Comment 1 Pierre Ossman cendio 2020-10-27 14:36:33 CET 
Another consequence is that these connections are killed when the service is stopped or restarted (bug 7578).
Comment 2 Niko Lehto cendio 2021-01-12 16:27:05 CET 
We fixed bug 7578 by utilizing 'KillMode=process' in the unit files. We might be able to remove this fix after we solve this issue with slices.
Note You need to log in before you can comment on or make changes to this bug.