> allows resource requests or denies them and (hopefully) kills the application
Why is killing the application desirable behaviour over just denying the request? > allows resource requests or denies them and (hopefully) kills the application
Why is killing the application desirable behaviour over just denying the request?The process' output can not be trusted, so it should stop processing. Detecting something you never expect to happen is almost tautologically stating the software doesn't know how to recover state.
This, of course, relies on an architecture where another process will take care of making sure an error is bubbled to the place it needs to go, pulling failsafe, etc... I will grant some environments and/or designs make this easier than others (eg. Erlang's error handling is all about letting processes die).
You can combine this with the panic= kernel command-line argument to set a reboot delay, but for headed (rather than headless) boxes it may be more desirable to keep the panic message up to see what process triggered it.
Only stuff that crashes is investigated.
Though a sysfs/procfs config for this would go a long way.