Page 1 of 1
Why is the process limit / fork-bomb protection gone?
Posted:
Tue Aug 13, 2002 9:21 amby mcgege
I recently updated from 1.9.4 to 1.9.6 and noticed the vanishing - why is it no more? I used this feature to restrict my users ...
GEGE
Posted:
Tue Aug 13, 2002 5:49 pmby spender
it could be implemented via PAM, it's easy to shoot up load in many other ways, and we support process-based resource restrictions in the ACL system.
-Brad
Posted:
Thu Aug 15, 2002 4:16 amby Himika
I also noticed that very good features like ptrace restricting/logging and BSD-style coredumps are gone. I just wonder why.
Posted:
Thu Aug 15, 2002 10:43 amby spender
bsd coredumps weren't security related, and the ptrace restrictions are done automatically in the ACL system.
-Brad
Posted:
Thu Aug 15, 2002 6:13 pmby evilcartman
But not everyone uses ACLs...