Glibc Introduces /etc/tunables.conf For System-Wide Tunables
([GNU] 2 Hours Ago
/etc/tunables.conf)
- Reference: 0001644069
- News link: https://www.phoronix.com/news/Glibc-System-Tunables
- Source link:
Red Hat has contributed new system-wide tunables infrastructure to the GNU C Library "glibc" that allows specifying system-wide tunables via the new /etc/tunables.conf configuration file.
Red Hat engineer has landed the system-wide tunables infrastructure today into Glibc Git. This now allows tunables to be defined with the /etc/tunables.conf configuration file as an alternative to specifying existing tunables within the GLIBC_TUNABLES= environment variable.
The /etc/tunables.conf allows specifying one Glibc tunable per line. Each line can also be prefixed with a single word or character that controls the overridability of using the user GLIBC_TUNABLES environment variable.
The tunables.conf configuration file also supports a [proc:*] syntax to allow pattern matching to different processes either on the basename or on the full path. Additionally, the system-wide tunables filtering also allows filtering AT_SECURE or non-AT_SECURE binaries too. This filtering will allow a lot of extra functionality to be applied by Glibc such as for trusted/untrusted binaries and other use-cases, especially with the ability now to block some tunables from being overrode via the environment variable.
More details on the new Glibc System-Wide Tunables support can be found via [1]this documentation commit .
This system-wide tunables support will be part of the Glibc 2.44 release due out in August.
[1] https://sourceware.org/git/?p=glibc.git;a=blobdiff;f=manual/tunables.texi;h=828c68151ad887550430605f007e289b5235f110;hp=e1d9fbae9cebe961fe45203251a761c3323a9917;hb=fae194043a099d45c044c883467c934153ecc51f;hpb=fcea66cd4685f9f3719e09cac52c73b9ece4bade
Red Hat engineer has landed the system-wide tunables infrastructure today into Glibc Git. This now allows tunables to be defined with the /etc/tunables.conf configuration file as an alternative to specifying existing tunables within the GLIBC_TUNABLES= environment variable.
The /etc/tunables.conf allows specifying one Glibc tunable per line. Each line can also be prefixed with a single word or character that controls the overridability of using the user GLIBC_TUNABLES environment variable.
The tunables.conf configuration file also supports a [proc:*] syntax to allow pattern matching to different processes either on the basename or on the full path. Additionally, the system-wide tunables filtering also allows filtering AT_SECURE or non-AT_SECURE binaries too. This filtering will allow a lot of extra functionality to be applied by Glibc such as for trusted/untrusted binaries and other use-cases, especially with the ability now to block some tunables from being overrode via the environment variable.
More details on the new Glibc System-Wide Tunables support can be found via [1]this documentation commit .
This system-wide tunables support will be part of the Glibc 2.44 release due out in August.
[1] https://sourceware.org/git/?p=glibc.git;a=blobdiff;f=manual/tunables.texi;h=828c68151ad887550430605f007e289b5235f110;hp=e1d9fbae9cebe961fe45203251a761c3323a9917;hb=fae194043a099d45c044c883467c934153ecc51f;hpb=fcea66cd4685f9f3719e09cac52c73b9ece4bade