From owner-freebsd-questions@freebsd.org Fri Aug 19 20:34:58 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 74C26BBEDA6 for ; Fri, 19 Aug 2016 20:34:58 +0000 (UTC) (envelope-from steve@sohara.org) Received: from smtp1.irishbroadband.ie (smtp1.irishbroadband.ie [62.231.32.12]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 3D9801F32 for ; Fri, 19 Aug 2016 20:34:57 +0000 (UTC) (envelope-from steve@sohara.org) Received: from [89.127.62.20] (helo=smtp.lan.sohara.org) by smtp1.irishbroadband.ie with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.76) (envelope-from ) id 1baqVD-0001hX-O1 for freebsd-questions@freebsd.org; Fri, 19 Aug 2016 21:34:55 +0100 Received: from [192.168.63.1] (helo=steve.lan.sohara.org) by smtp.lan.sohara.org with smtp (Exim 4.86_2 (FreeBSD)) (envelope-from ) id 1baqVY-000HjB-4r for freebsd-questions@freebsd.org; Fri, 19 Aug 2016 20:35:16 +0000 Date: Fri, 19 Aug 2016 21:34:54 +0100 From: Steve O'Hara-Smith To: freebsd-questions@freebsd.org Subject: Re: How do I limit I/O usage for a user/process? A user broke my system Message-Id: <20160819213454.7aafe1353a90f986dd1539b1@sohara.org> In-Reply-To: References: <20160819104058.1c60a63fb832fbdc1524207c@sohara.org> <20160819101657.GB2560@hephaistos.local> <20160819114429.756b3d25f9335417a0c673c3@sohara.org> <5dcc797b-5aac-cac1-b120-b4ff91f360dd@tysdomain.com> X-Mailer: Sylpheed 3.5.0 (GTK+ 2.24.29; amd64-portbld-freebsd10.1) X-Clacks-Overhead: "GNU Terry Pratchett" Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Aug 2016 20:34:58 -0000 On Fri, 19 Aug 2016 16:28:29 -0400 Mark Moellering wrote: > Depending on the nature of the box, one possibility (albeit a slightly > more complex one), is using a jail. If basic user accounts are in a > jail, the jail can run out of memory and start file swapping without > affecting the kernel or other server functions. Again, this depends > on your set-up, etc A VM can do this but not a jail. -- Steve O'Hara-Smith