Date: Sat, 10 Apr 1999 11:14:37 +0400 (MSD) From: Dmitry Valdov <dv@dv.ru> To: chris@calldei.com Cc: freebsd-current@FreeBSD.ORG, freebsd-questions@FreeBSD.ORG Subject: Re: DoS from local users (fwd) Message-ID: <Pine.BSF.3.95q.990410111322.8140B-100000@xkis.kis.ru> In-Reply-To: <19990410020533.A8083@holly.dyndns.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, 10 Apr 1999, Chris Costello wrote: > Date: Sat, 10 Apr 1999 02:05:33 -0500 > From: Chris Costello <chris@holly.dyndns.org> > Reply-To: chris@calldei.com > To: Dmitry Valdov <dv@dv.ru> > Cc: freebsd-current@FreeBSD.ORG, freebsd-questions@FreeBSD.ORG > Subject: Re: DoS from local users (fwd) > > On Sat, Apr 10, 1999, Dmitry Valdov wrote: > > > You typically want to set a restriction as to how many > > > processes a user can spawn. This is done by editing > > > /etc/login.conf and changing the user's login class, see the man > > > page for 'login.conf'. > > > > > > > I'm about CPU usage, not about many processes. > > See: > > CPU states: 17.8% user, 0.0% nice, 81.7% system, 0.5% interrupt, 0.0% > > idle > > on any (tested on P2-45) machine. > > > > CPU is used by SYSTEM, not by USER. So I can't restrict it with login.conf > > And load average can be up to 20-40 :( > > > > Please don't redirect me to -questions, it's a kernel problem, not just > > config. > > How is it a kernel problem? It's a forkbomb. It spawns many > processes. You can also limit CPU usage with login.conf, I > believe. Hmm. How I can limit CPU usage by SYSTEM? See top's output below. Dmitry. PS. I've just tried it. And I'm right - CPU usage limit can't help. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.95q.990410111322.8140B-100000>