Date: Fri, 16 Mar 2001 22:02:27 +0100 (CET) From: Paul Herman <pherman@frenchfries.net> To: "ho-sang, yoon" <tsoi@xocah.holywar.net> Cc: <freebsd-security@FreeBSD.ORG>, Kris Kennaway <kris@obsecurity.org> Subject: Re: Multiple vendors FTP denial of service (fwd) Message-ID: <Pine.BSF.4.33.0103162158140.10083-100000@husten.security.at12.de> In-Reply-To: <20010315215913.A70990@mollari.cthul.hu>
next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, 16 Mar 2001, ho-sang, yoon wrote: > $ whoami > ftp > $ ulimit -a > [...] > data seg size (kbytes, -d) 524288 > stack size (kbytes, -s) 65536 > core file size (512-blocks, -c) 102400 > max memory size (kbytes, -m) 20480 > locked memory (kbytes, -l) 10240 > [...] > > ---top----------------------------------------------------------------------- > PID USERNAME PRI NICE SIZE RES STATE TIME WCPU CPU COMMAND > 6379 root 55 0 33360K 33016K RUN 0:40 86.02% 84.67% ftpd > [cut] > ----------------------------------------------------------------------------- > > I don't think that the resourse limit does effect on this matter. > Or, am I something wrong? I, too, had thought that "max memory size" (or RLIMIT_RSS) would have kicked in, but it didn't. However, what does work is setting the "datasize" (RLIMIT_DATA), which will kill ftpd when "SIZE" exceeds RLIMIT_DATA. Now I'm wondering about RLIMIT_RSS, i.e. the amount of memory in core. I'm perusing through sys/vm now... -Paul. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.33.0103162158140.10083-100000>