From owner-freebsd-jail@FreeBSD.ORG Thu Mar 19 12:26:16 2009 Return-Path: Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 30EF4106564A for ; Thu, 19 Mar 2009 12:26:16 +0000 (UTC) (envelope-from 000.fbsd@quip.cz) Received: from elsa.codelab.cz (elsa.codelab.cz [94.124.105.4]) by mx1.freebsd.org (Postfix) with ESMTP id E30EE8FC1A for ; Thu, 19 Mar 2009 12:26:15 +0000 (UTC) (envelope-from 000.fbsd@quip.cz) Received: from localhost (localhost.codelab.cz [127.0.0.1]) by elsa.codelab.cz (Postfix) with ESMTP id E167F19E023; Tue, 17 Mar 2009 22:26:11 +0100 (CET) Received: from [192.168.1.2] (r5bb235.net.upc.cz [86.49.61.235]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by elsa.codelab.cz (Postfix) with ESMTPSA id B60DB19E019; Tue, 17 Mar 2009 22:26:06 +0100 (CET) Message-ID: <49C0156E.30701@quip.cz> Date: Tue, 17 Mar 2009 22:26:06 +0100 From: Miroslav Lachman <000.fbsd@quip.cz> User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.12) Gecko/20050915 X-Accept-Language: cz, cs, en, en-us MIME-Version: 1.0 To: Espartano References: In-Reply-To: Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Cc: Nicolas de Bari Embriz Garcia Rojas , freebsd-jail@freebsd.org Subject: Re: maxproc per jail X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Mar 2009 12:26:16 -0000 Espartano wrote: > On Tue, Mar 17, 2009 at 1:48 AM, Nicolas de Bari Embriz Garcia Rojas > wrote: > >>Hi all, it is posible to limite the maxproc per jail ? >> >>or how to put a protection to the main host in case the root user of a jail >>try to make a fork bom. >> > > > may be you can protect your computer using cpu's limits, you should > visit this page: > > http://wiki.freebsd.org/JailResourceLimits > > take a look that the patch is for FreeBSD RELENG_6, I don't know if > the patch work fine with FreeBSD 7, I have never used this patch. It is outdated and AFAIK no longer maintained. (FreeBSD 7.1 is shipped with different scheduler than before) Miroslav Lachman