[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Jailkit-users] Prevent Fork Bombs on Jailed Python Interpreter
From: |
Gregory Piñero |
Subject: |
Re: [Jailkit-users] Prevent Fork Bombs on Jailed Python Interpreter |
Date: |
Thu, 25 Oct 2007 18:27:48 -0400 |
On 10/25/07, address@hidden <address@hidden> wrote:
> Hello Greg,
>
> >> the standard thing that works against fork bombs: limit the number of
> >> processes.
> >>
> >
> > Thanks, that sounds like it would work. Any advice on how to do that on
> > Linux?
>
> This is usually done by setting values in limits.conf (to be found in /etc
> or /etc/security). The file comes with good comments and a few examples. So
> there is some basis there to work from.
> Remember that a normal shell session via jailkit already uses a few
> processes, so don't go setting the number too strictly. On the other hand,
> memory should probably be guarded more closely.
>
Thanks. Is that a better approach than using ulimit?
-Greg
- [Jailkit-users] Prevent Fork Bombs on Jailed Python Interpreter, Gregory Piñero, 2007/10/25
- Re: [Jailkit-users] Prevent Fork Bombs on Jailed Python Interpreter, Olivier Sessink, 2007/10/25
- Re: [Jailkit-users] Prevent Fork Bombs on Jailed Python Interpreter, Gregory Piñero, 2007/10/25
- Re: [Jailkit-users] Prevent Fork Bombs on Jailed Python Interpreter, dev, 2007/10/25
- Re: [Jailkit-users] Prevent Fork Bombs on Jailed Python Interpreter,
Gregory Piñero <=
- Re: [Jailkit-users] Prevent Fork Bombs on Jailed Python Interpreter, Gregory Piñero, 2007/10/25
- Re: [Jailkit-users] Prevent Fork Bombs on Jailed Python Interpreter, Gregory Piñero, 2007/10/26
- Re: [Jailkit-users] Prevent Fork Bombs on Jailed Python Interpreter, Olivier Sessink, 2007/10/26
- Re: [Jailkit-users] Prevent Fork Bombs on Jailed Python Interpreter, dev, 2007/10/27
- Re: [Jailkit-users] Prevent Fork Bombs on Jailed Python Interpreter, Gregory Piñero, 2007/10/27
- Re: [Jailkit-users] Prevent Fork Bombs on Jailed Python Interpreter, Olivier Sessink, 2007/10/27