Process limit for user in Linux

Posted by BrainCore on Server Fault See other posts from Server Fault or by BrainCore
Published on 2010-03-12T08:40:01Z Indexed on 2010/03/12 10:47 UTC
Read the original article Hit count: 377

Filed under:
|
|
|
|

This is the standard question, "How do I set a process limit for a user account in Linux to prevent fork-bombing," with an additional twist. The running program originates as a root-owned Python process, which then setuids/setgids itself as a regular user. As far as I know, at this point, any limits set in /etc/security/limits.conf do not apply; the setuid-ed process may now fork bomb. Any ideas how to prevent this?

© Server Fault or respective owner

Process limit for user in Linux

Posted by BrainCore on Server Fault See other posts from Server Fault or by BrainCore
Published on 2010-03-12T09:17:24Z Indexed on 2010/03/12 9:17 UTC
Read the original article Hit count: 377

Filed under:
|
|
|
|

This is the standard question, "How do I set a process limit for a user account in Linux to prevent fork-bombing," with an additional twist. The running program originates as a root-owned Python process, which then setuids/setgids itself as a regular user. As far as I know, at this point, any limits set in /etc/security/limits.conf do not apply; the setuid-ed process may now fork bomb. Any ideas how to prevent this?

© Server Fault or respective owner

Process limit for user in Linux

Posted by BrainCore on Stack Overflow See other posts from Stack Overflow or by BrainCore
Published on 2010-03-12T08:40:01Z Indexed on 2010/03/12 8:47 UTC
Read the original article Hit count: 377

Filed under:
|
|
|
|

This is the standard question, "How do I set a process limit for a user account in Linux to prevent fork-bombing," with an additional twist. The running program originates as a root-owned Python process, which then setuids/setgids itself as a regular user. As far as I know, at this point, any limits set in /etc/security/limits.conf do not apply; the setuid-ed process may now fork bomb. Any ideas how to prevent this?

© Stack Overflow or respective owner

Related posts about linux

Related posts about process