Date: Thu, 25 Jan 2001 14:26:52 -0500 From: "Allen Edwards" <aedwards@hiqinternet.com> To: <freebsd-security@FreeBSD.ORG> Subject: RE: Newbie Post - Limiting processes Message-ID: <NCBBKJBPKLMFELAPAEHGAEMCCCAA.aedwards@hiqinternet.com> In-Reply-To: <20010125211418.B1122@ringworld.oblivion.bg>
next in thread | previous in thread | raw e-mail | index | archive | help
Thank you all kindly. I am the kind of newbie who has a few brain cells left, and little hints like a file existing called "login.conf" and the man works on it was a great help. Also thanks for the tips here, I had it set for 2 and might bump it up to 5. I got the idea of background process from a web-site that sells shell accounts. http://www.digital-galaxy.net/index2.htm They sell based on HDD space as well as background processes. Thanks again for everyone's help. Sincerely, Allen Edwards Sr. Applications Engineer Acucomm, Inc. Allen.Edwards@Acucomm.com AIM: AllenDWE ICQ# 54890016 -----Original Message----- From: owner-freebsd-security@FreeBSD.ORG [mailto:owner-freebsd-security@FreeBSD.ORG]On Behalf Of Peter Pentchev Sent: Thursday, January 25, 2001 2:14 PM To: Allen Edwards Cc: freebsd-security@FreeBSD.ORG Subject: Re: Newbie Post - Limiting processes On Thu, Jan 25, 2001 at 01:31:42PM -0500, Allen Edwards wrote: > Feel free to flame the newbie if he asks an off topic question (great now > I'm talking about myself in the 3rd person). > > Is there a way to limit a user to a certain number of processes? e.g. one > foreground and one background process. > > I am working on providing some shell accounts to a few clients who have > requested it and have heard of persons doing this. Well, you can limit the total number of processes a user is allowed to run at any given time, background or foreground alike. Look at the login.conf(5) manpage; you can define a custom login class for your shell users, so that limits are only enforced for them, and not for your privileged admin logins. 'maxproc' is the setting for the total number of processes; I don't think you can control the number of background processes, but if your users happen to run too many of those, they will not even be able to login later :) Actually, *one* foreground process is a bit too much - you need at least one for the shell and one for any program the user might run. Each shell pipe and/or other program fork is one more process. So.. tread lightly :) G'luck, Peter -- I've heard that this sentence is a rumor. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?NCBBKJBPKLMFELAPAEHGAEMCCCAA.aedwards>