Sử dụng ulimit để tăng cường bảo mật cho hệ thống (Using ulimit )

Sử dụng ulimit để tăng cường bảo mật cho hệ thống (Using ulimit )

This week's tip introduces ulimit -- a command to define system resource limits. As a user, you can create self-imposed limits to prevent processes from taking up too much CPU time or memory.
To view all available resource limits, type ulimit -a. This command shows the limits the system administrator has imposed on your account. You can lower these limits, but you can't increase them. Many accounts will have 'unlimited' listed. If so, here are some useful things you can do with ulimit:


Code Listing 5.1: Preventing core files



% ulimit -c 0
Code Listing 5.2: Preventing Files larger than 25 MB

% ulimit -f 25600
Since ulimit is a builtin shell command, see your shell manual page for more information (e.g. man bash, man zsh, etc.).

Note:
System administrators can impose system-wide limits using /etc/limits. See man limits for more information.




Nguon: http://www.gentoo.org/news/en/gwn/20...newsletter.xml