pam/pam-limit-nproc.patch

Index: Linux-PAM-1.3.0/modules/pam_limits/limits.conf
===================================================================
--- Linux-PAM-1.3.0.orig/modules/pam_limits/limits.conf
+++ Linux-PAM-1.3.0/modules/pam_limits/limits.conf
@@ -47,4 +47,10 @@
 #ftp             hard    nproc           0
 #@student        -       maxlogins       4
 
+# harden against fork-bombs
+*               hard    nproc           16384
+*               soft    nproc           4096
+# root            hard    nproc           3000
+# root            soft    nproc           1850
+
 # End of file
Accepting request 444873 from home:jmoellers:branches:Linux-PAM OBS-URL: https://build.opensuse.org/request/show/444873 OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=167 2016-12-15 10:44:44 +01:00			`Index: Linux-PAM-1.3.0/modules/pam_limits/limits.conf`
Accepting request 242966 from home:bmwiedemann:branches:Linux-PAM limit number of processes to 700 by default to harden against fork-bombs OBS-URL: https://build.opensuse.org/request/show/242966 OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=141 2014-12-25 18:01:00 +01:00			`===================================================================`
Accepting request 444873 from home:jmoellers:branches:Linux-PAM OBS-URL: https://build.opensuse.org/request/show/444873 OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=167 2016-12-15 10:44:44 +01:00			`--- Linux-PAM-1.3.0.orig/modules/pam_limits/limits.conf`
			`+++ Linux-PAM-1.3.0/modules/pam_limits/limits.conf`
Accepting request 242966 from home:bmwiedemann:branches:Linux-PAM limit number of processes to 700 by default to harden against fork-bombs OBS-URL: https://build.opensuse.org/request/show/242966 OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=141 2014-12-25 18:01:00 +01:00			`@@ -47,4 +47,10 @@`
			`#ftp hard nproc 0`
			`#@student - maxlogins 4`

			`+# harden against fork-bombs`
Accepting request 444873 from home:jmoellers:branches:Linux-PAM OBS-URL: https://build.opensuse.org/request/show/444873 OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=167 2016-12-15 10:44:44 +01:00			`+* hard nproc 16384`
			`+* soft nproc 4096`
			`+# root hard nproc 3000`
			`+# root soft nproc 1850`
Accepting request 242966 from home:bmwiedemann:branches:Linux-PAM limit number of processes to 700 by default to harden against fork-bombs OBS-URL: https://build.opensuse.org/request/show/242966 OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=141 2014-12-25 18:01:00 +01:00			`+`
			`# End of file`