Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #185750 > unrolled thread

Limiting resource usage

Back to article view | Back to linux.debian.user

Contents

  Limiting resource usage <jumpy@tutanota.com> - 2017-08-23 00:10 +0200
    Re: Limiting resource usage Zoltán Herman <zoltanhbz@gmail.com> - 2017-08-23 00:40 +0200
      Re: Limiting resource usage Reco <recoverym4n@gmail.com> - 2017-08-23 08:20 +0200
        Re: Limiting resource usage Zoltán Herman <zoltanhbz@gmail.com> - 2017-08-23 10:30 +0200
    Re: Limiting resource usage Lck Ras <likcoras@riseup.net> - 2017-08-23 02:10 +0200

#185750 — Limiting resource usage

[Multipart message — attachments visible in raw view] — view raw

https://www.debian.org/doc/manuals/securing-debian-howto/ch4.en.html
4.11.2 Limiting resource usage: the limits.conf file.
$ ulimit -a
core file size          
(blocks, -c) 
data seg size           
(kbytes, -d)
scheduling priority             
(-e)
file size               
(blocks, -f) 
pending signals                 
(-i) 
max locked memory       
(kbytes, -l) 
max memory size         
(kbytes, -m) 
open files                      
(-n) 
pipe size            
(512 bytes, -p) 
POSIX message queues     
(bytes, -q) 
real-time priority              
(-r) 
stack size              
(kbytes, -s) 
cpu time               
(seconds, -t) 
max user processes              
(-u) 
virtual memory          
(kbytes, -v) 
file locks                      
(-x) 

- i cannot change the default setting.
is it a secure feature/the best option or a sign that something is wrong.

- have i to configure limits.conf ?
my /etc/security/limits.conf is not set (all is marked as # comment)
i do not know how-to-do that & i have not found (desktop default user / no server) something that i could copy & past or a soft/script which should generate the best option for me.

- could someone solve that using k.i.s.s. ?

thx by advance in case of responses.
https://www.debian.org/doc/manuals/debian-handbook does not answer at my questions  ),

--
Securely sent with Tutanota.

[toc] | [next] | [standalone]

#185753

[Multipart message — attachments visible in raw view] — view raw

if you use the stretch/systemd then
systemd completely ignores /etc/security/limits*....





2017-08-22 23:48 GMT+02:00 <jumpy@tutanota.com>:

> https://www.debian.org/doc/manuals/securing-debian-howto/ch4.en.html
> 4.11.2 Limiting resource usage: the limits.conf file.
> $ ulimit -a
> core file size
> (blocks, -c)
> data seg size
> (kbytes, -d)
> scheduling priority
> (-e)
> file size
> (blocks, -f)
> pending signals
> (-i)
> max locked memory
> (kbytes, -l)
> max memory size
> (kbytes, -m)
> open files
> (-n)
> pipe size
> (512 bytes, -p)
> POSIX message queues
> (bytes, -q)
> real-time priority
> (-r)
> stack size
> (kbytes, -s)
> cpu time
> (seconds, -t)
> max user processes
> (-u)
> virtual memory
> (kbytes, -v)
> file locks
> (-x)
>
> - i cannot change the default setting.
> is it a secure feature/the best option or a sign that something is wrong.
>
> - have i to configure limits.conf ?
> my /etc/security/limits.conf is not set (all is marked as # comment)
> i do not know how-to-do that & i have not found (desktop default user / no
> server) something that i could copy & past or a soft/script which should
> generate the best option for me.
>
> - could someone solve that using k.i.s.s. ?
>
> thx by advance in case of responses.
> https://www.debian.org/doc/manuals/debian-handbook does not answer at my
> questions  ),
>
> --
> Securely sent with Tutanota.
>

[toc] | [prev] | [next] | [standalone]

#185766

	Hi.

On Wed, 23 Aug 2017 00:31:10 +0200
Zoltán Herman <zoltanhbz@gmail.com> wrote:

> if you use the stretch/systemd then
> systemd completely ignores /etc/security/limits*....

Of course login does not ignore /etc/security/limits.conf even if using
systemd as /etc/security/limits* are processed by pam_limits.so. systemd
units can contain additional shell limits, but that's different story.

Reco

[toc] | [prev] | [next] | [standalone]

#185774

[Multipart message — attachments visible in raw view] — view raw

You are right, I tried:
I rewrite the soft / hard nproc value to 30/60(username) then logout and no
longer
I could not enter X window :)

But then why he did not succeed?

2017-08-23 8:17 GMT+02:00 Reco <recoverym4n@gmail.com>:

>         Hi.
>
> On Wed, 23 Aug 2017 00:31:10 +0200
> Zoltán Herman <zoltanhbz@gmail.com> wrote:
>
> > if you use the stretch/systemd then
> > systemd completely ignores /etc/security/limits*....
>
> Of course login does not ignore /etc/security/limits.conf even if using
> systemd as /etc/security/limits* are processed by pam_limits.so. systemd
> units can contain additional shell limits, but that's different story.
>
> Reco
>
>

[toc] | [prev] | [next] | [standalone]

#185759

On 08/23/2017 06:48 AM, jumpy@tutanota.com wrote:
> - i cannot change the default setting.
> is it a secure feature/the best option or a sign that something is wrong.

limits.conf contains the "default" ulimits if it is set as "soft", and
absolute limits if set as "hard", so if you want to change the defaults,
you will need to configure limits.conf.

> - have i to configure limits.conf ?
> my /etc/security/limits.conf is not set (all is marked as # comment)
> i do not know how-to-do that & i have not found (desktop default user / no server) something that i could copy & past or a soft/script which should generate the best option for me.

Check out limits.conf(5). In short, you can add lines to
/etc/security/limits.conf to impose global limits (except for systemd
services). The format is <domain> <type> <item> <value>.

<domain>: Who is affected by the limit? can be * for everyone, a
specific user, etc.

<type>: Either "hard", "soft", or "-". "hard" and "soft" are as I
described above, "-" combines both.

<item>: The "thing" to limit. Stuff like # of processes, memory used,
etc. See the manpage for a complete list.

<value>: The value you want to set as the limit.

All the lines already in that file are either explaining how to use it
or examples.

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.user

csiph-web