Security Basics mailing list archives

RE: User process limitations..


From: "Bill Roe" <broe () tcshealthcare com>
Date: Fri, 21 Feb 2003 09:21:49 -0800

You didn't mention the OS.  On HPUX there are things called resource limits.

The kernel has a soft and hard limits, these limits are compiled into the
kernel.  Programs get an error, for example trying to create a new process
or open a file.  The initial error is the soft limit.  The program can then
call get_resource_limit(...) to get the limits, and then can call
set_resource_limit(...) to adjust the lower limit (up to the hard limit),
and then can retry the operation.

If I remember correctly, by default the kernel comes with 40 processes as a
soft limit.  You MAY be able to have you program call set_resource_limit and
lower the effective soft limit to say three.  I'm not sure about this, but
it may be possible.

Try man get_resource_limit and follow the docs.

I hope this helps.

William H. Roe, Jr.
Software Architect, CISSP
TCS Healthcare Technologies
500 Wall Street
Auburn, California  95603
broe () tcshealthcare com


-----Original Message-----
From: Kenneth Hauklien [mailto:boomy () boomdrak no]
Sent: Thursday, February 20, 2003 1:34 AM
To: security-basics () securityfocus com
Subject: User process limitations..




Hi

Is there any way to limit a users / groups processes? I run a shell/web
server and want to limit them down to for example 2-3 processes. Is this
possible in any way?

Thank you all in advance

Kenneth Hauklien
Norway



Current thread: