Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 21 Sep 1999 18:01:13 -0700 (PDT)
From:      Doug <Doug@gorean.org>
To:        Kip Macy <kip@lyris.com>
Cc:        Bryan Talbot <btalbot@ucsd.edu>, stable@FreeBSD.ORG
Subject:   Re: kern.maxfiles and kern.maxfilesperproc
Message-ID:  <Pine.BSF.4.10.9909211759120.20665-100000@dt014nb6.san.rr.com>
In-Reply-To: <Pine.SOL.4.05.9909211645390.16568-100000@luna>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 21 Sep 1999, Kip Macy wrote:

> You are correct -- what one really needs is a per user limit on files -- 
> there may already be something to that effect, although I do not know of
> it.

	That's because you completely disregarded all of the explanations
for the current behavior that were offered to you in -hackers, and you
apparently never even looked at login.conf which does allow you to limit
the number of processes and number of files per process on a per user
basis. 

	Now please drop this ridiculous thread.

Thanks,

Doug

> On Tue, 21 Sep 1999, Bryan Talbot wrote:
> 
> > At 04:23 PM 9/21/99 , Kip Macy wrote:
> > >Thanks. Although having maxfiles == maxfilesperproc might make sense for
> > >special cases e.g. a machine completely dedicated to one process -- It is
> > >dangerous at best for the general case. Any malicious program can make a
> > >machine running FreeBSD non-functional. The default should be set with the
> > >average user in mind, namely protecting him from himself.
> > >
> > >
> > >                                         -Kip
> > 
> > 
> > But adjusting maxfilesperproc > maxfiles won't protect you from a malicious 
> > process or user any more than having maxfilesperproc == maxfiles.  Just 
> > fork() or run two (or more) processes that open all the file handles.  Same 
> > result, right?
> > 
> > -Bryan
> > 
> > 
> > =====================================================================
> > IMPORTANT NOTICE: According to certain suggested versions of the
> > Grand Unified Theory, the primary particles constituting this
> > message may decay to nothingness within the next Four Hundred
> > Million Years.
> > =====================================================================
> >           "I think not!" said Descartes, who promptly disappeared.
> > 
> > 
> > 
> > To Unsubscribe: send mail to majordomo@FreeBSD.org
> > with "unsubscribe freebsd-stable" in the body of the message
> > 
> > 
> 
> 
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-stable" in the body of the message
> 

-- 
"My mama told me, my mama said, 'don't cry.' She said, 'you're too young a man
to have as many women you got.' I looked at my mother dear and didn't even
crack a smile. I said, 'If women kill me, I don't mind dyin!'" 

    - John Belushi as "Joliet" Jake Blues, "I Don't Know"



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.10.9909211759120.20665-100000>