From owner-freebsd-stable Tue Feb 26 8:37:36 2002 Delivered-To: freebsd-stable@freebsd.org Received: from home.cg.nu (home.cg.nu [213.196.2.115]) by hub.freebsd.org (Postfix) with ESMTP id 407DE37B402 for ; Tue, 26 Feb 2002 08:37:32 -0800 (PST) Received: from wevers.org (netfreak.xs4all.nl [213.84.69.96]) (using TLSv1 with cipher RC4-MD5 (128/128 bits)) (No client certificate requested) by home.cg.nu (Postfix) with ESMTP id B2737158ECE for ; Tue, 26 Feb 2002 17:37:30 +0100 (CET) Message-ID: <3C7BB9B1.3060507@wevers.org> Date: Tue, 26 Feb 2002 17:37:05 +0100 From: Henk Wevers User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:0.9.4) Gecko/20011128 Netscape6/6.2.1 X-Accept-Language: en-us MIME-Version: 1.0 To: freebsd-stable@freebsd.org Subject: cvs commit: src/sys/kern kern_fork.c On 4.5 RELEASE? Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Hi, Can i use this diff shamelessly on an FreeBSD 4.5-RELEASE system? I can use the diff. Henk Wevers -- silby 2002/02/25 21:32:44 PST Modified files: (Branch: RELENG_4) sys/kern kern_fork.c Log: MFC rev 1.132: A few misc forkbomb defenses: - Leave 10 processes for root-only use, the previous value of 1 was insufficient to run ps ax | more. - Remove the printing of "proc: table full". When the table really is full, this would flood the screen/logs, making the problem tougher to deal with. - Force any process trying to fork beyond its user's maximum number of processes to sleep for .5 seconds before returning failure. This turns 2000 rampaging fork monsters into 2000 harmlessly snoozing fork monsters. Revision Changes Path 1.72.2.10 +5 -2 src/sys/kern/kern_fork.c To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message