From owner-freebsd-stable Wed Aug 16 5:57:30 2000 Delivered-To: freebsd-stable@freebsd.org Received: from moon.harmonic.co.il (moon.harmonic.co.il [192.116.140.65]) by hub.freebsd.org (Postfix) with ESMTP id 75B3937B5BC for ; Wed, 16 Aug 2000 05:57:26 -0700 (PDT) (envelope-from roman@harmonic.co.il) Received: (from nobody@localhost) by moon.harmonic.co.il (8.9.3/8.9.3) id PAA15760 for freebsd-stable@freebsd.org; Wed, 16 Aug 2000 15:56:31 +0300 To: Message-ID: <966430591.399a8f7f98837@webmail.harmonic.co.il> Date: Wed, 16 Aug 2000 15:56:31 +0300 From: Roman Shterenzon MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit User-Agent: IMP/PHP IMAP webmail program 2.2.0-pre13 Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Hi, In the shipping param.c file the maxfilesperproc is made equal to overall maxfiles, e.g. kern.maxfiles=kern.maxfilesperproc. This creates a possibility of DoS, or I'm missing something? Perhaps it's better to leave some minimal window for other processes? Or even make it fraction of maxfiles? --- /usr/src/sys/conf/param.c Mon Aug 14 15:35:51 2000 +++ param.c Mon Aug 14 18:33:45 2000 @@ -68,7 +68,7 @@ int maxproc = NPROC; /* maximum # of processes */ int maxprocperuid = NPROC-1; /* maximum # of processes per user */ int maxfiles = MAXFILES; /* system wide open files limit */ -int maxfilesperproc = MAXFILES; /* per-process open files limit */ +int maxfilesperproc = MAXFILES - 40; /* per-process open files limit */ int ncallout = 16 + NPROC + MAXFILES; /* maximum # of timer events */ int mbuf_wait = 32; /* mbuf sleep time in ticks */ --Roman Shterenzon, UNIX System Administrator and Consultant [ Xpert UNIX Systems Ltd., Herzlia, Israel. Tel: +972-9-9522361 ] To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message