bdcad7ea0f
limit number of processes to 700 by default to harden against fork-bombs OBS-URL: https://build.opensuse.org/request/show/242966 OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=141
16 lines
564 B
Diff
16 lines
564 B
Diff
Index: Linux-PAM-1.1.8/modules/pam_limits/limits.conf
|
|
===================================================================
|
|
--- Linux-PAM-1.1.8.orig/modules/pam_limits/limits.conf
|
|
+++ Linux-PAM-1.1.8/modules/pam_limits/limits.conf
|
|
@@ -47,4 +47,10 @@
|
|
#ftp hard nproc 0
|
|
#@student - maxlogins 4
|
|
|
|
+# harden against fork-bombs
|
|
+* hard nproc 800
|
|
+* soft nproc 700
|
|
+root hard nproc 900
|
|
+root soft nproc 850
|
|
+
|
|
# End of file
|