From owner-freebsd-stable Thu Aug 17 0:41:45 2000 Delivered-To: freebsd-stable@freebsd.org Received: from moon.harmonic.co.il (moon.harmonic.co.il [192.116.140.65]) by hub.freebsd.org (Postfix) with ESMTP id 37D0937B608 for ; Thu, 17 Aug 2000 00:41:32 -0700 (PDT) (envelope-from roman@harmonic.co.il) Received: (from nobody@localhost) by moon.harmonic.co.il (8.9.3/8.9.3) id KAA16652; Thu, 17 Aug 2000 10:40:23 +0300 To: "Chris D. Faulhaber" Subject: Re: your mail Message-ID: <966498023.399b96e7da6c4@webmail.harmonic.co.il> Date: Thu, 17 Aug 2000 10:40:23 +0300 From: Roman Shterenzon Cc: Roman Shterenzon , References: In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit User-Agent: IMP/PHP IMAP webmail program 2.2.0-pre13 Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Quoting "Chris D. Faulhaber" : > On Wed, 16 Aug 2000, Roman Shterenzon wrote: > > > Hi, > > > > In the shipping param.c file the maxfilesperproc is made equal to > overall > > maxfiles, e.g. kern.maxfiles=kern.maxfilesperproc. > > This creates a possibility of DoS, or I'm missing something? > > Perhaps it's better to leave some minimal window for other processes? > > Or even make it fraction of maxfiles? > > > > Or properly configure login classes so lusers cannot reach maxfiles Yes, or as proposed sysctl -w (which I've in login scripts) But, I'm talking about the *default* system behaviour. Not all sysadms are well experienced, and making a system a little more foolproof seems a good thing to me. It may help against some malfunctioning software as well. > > ----- > Chris D. Faulhaber - jedgar@fxp.org - jedgar@FreeBSD.org > -------------------------------------------------------- > FreeBSD: The Power To Serve - http://www.FreeBSD.org > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-stable" in the body of the message > --Roman Shterenzon, UNIX System Administrator and Consultant [ Xpert UNIX Systems Ltd., Herzlia, Israel. Tel: +972-9-9522361 ] To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message