Robert Watson <rwatson@FreeBSD.org> writes:
quoted text
> Dag-Erling Smørgrav <des@des.no> writes:
> > Robert Watson <rwatson@FreeBSD.org> writes:
> > > The right answer is presumably to introduce a new LIMIT_SWAP, which
> > > limits the allocation of anonymous memory by processes, and size it to
> > > something like 90% of swap space by default.
> > Not a good solution on its own.  You need a per-process limit as
> > well, otherwise a malloc() bomb will still cause other processes to
> > fail randomly.
> That was what I had in mind, the above should read RLIMIT_SWAP.

You don't want the default to be so high.  You want a low default, with
the possibility for the admin to increase the limit for a particular
user in login.conf or similar without rebooting (which is currently not
possible since the default datasize == maxdsiz, which can only be
changed in the kernel config or loader.conf)

You may also want to have a collective limit for unprivileged users, so
root will still be able to log in if something goes wrong.

DES
-- 
Dag-Erling Smørgrav - des@des.no
_______________________________________________
freebsd-current@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-current
To unsubscribe, send any mail to "freebsd-current-unsubscribe@freebsd.org"