testing/pam
SHA256
3
0
Fork 0
forked from pool/pam
Code Pull Requests Activity

Accepting request 444873 from home:jmoellers:branches:Linux-PAM

Browse Source 
OBS-URL: https://build.opensuse.org/request/show/444873
OBS-URL: https://build.opensuse.org/package/show/Linux-PAM/pam?expand=0&rev=167
This commit is contained in:
Thorsten Kukuk 2016-12-15 09:44:44 +00:00 committed by Git OBS Bridge
parent 731ae6c394
commit c31c12f192
3 changed files with 15 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
pam-limit-nproc.patch
View File

@ -1,15 +1,15 @@
Index: Linux-PAM-1.1.8/modules/pam_limits/limits.conf
Index: Linux-PAM-1.3.0/modules/pam_limits/limits.conf
===================================================================
--- Linux-PAM-1.1.8.orig/modules/pam_limits/limits.conf
+++ Linux-PAM-1.1.8/modules/pam_limits/limits.conf
--- Linux-PAM-1.3.0.orig/modules/pam_limits/limits.conf
+++ Linux-PAM-1.3.0/modules/pam_limits/limits.conf
@@ -47,4 +47,10 @@
#ftp hard nproc 0
#@student - maxlogins 4
+# harden against fork-bombs
+* hard nproc 4000
+* soft nproc 3500
+root hard nproc 3000
+root soft nproc 1850
+* hard nproc 16384
+* soft nproc 4096
+# root hard nproc 3000
+# root soft nproc 1850
+
# End of file

7
pam.changes
View File

@ -1,3 +1,10 @@
-------------------------------------------------------------------
Thu Dec 8 12:41:05 UTC 2016 - josef.moellers@suse.com
- Increased nproc limits for non-privileged users to 4069/16384.
Removed limits for "root".
[pam-limit-nproc.patch, bsc#1012494, bsc#1013706]
-------------------------------------------------------------------
Sun Jul 31 11:08:19 UTC 2016 - develop7@develop7.info

2
pam.spec
View File

@ -1,7 +1,7 @@
#
# spec file for package pam
#
# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany.
# Copyright (c) 2016 SUSE LINUX Products GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed