Re: resource limits
On Fri, Nov 03, 2000 at 05:56:09PM +0800, Mailing List wrote:
> By putting it in the /etc/init.d/apache script, it would limit the apache
> server as well (www-data) user, and thats bad. We ONLY want to limit the
> user's cgi processes. We haven't founded any script that suexec uses to run
> user cgis, so we can't limit it that way.
If you run CGIs for each host under suEXEC, you can run them as another
user and thusly limit them. Under Linux, resource restrictions other
than disk quotas have to be done by a parent process (such as login)
for all of it's children to run with those restrictions.
If you asked me, I'd hack suexec to use setrlimit(2).
> ----- Original Message -----
> From: "Kasatenko Ivan Alex." <skywriter@rnc.ru>
> To: <debian-isp@lists.debian.org>
> Sent: Friday, November 03, 2000 4:56 PM
> Subject: Re: resource limits
>
>
> Hello Jeremy,
>
> Friday, November 03, 2000, 3:09:35 AM, you wrote:
>
> JCR> What is an easy way to find out how much of certain resources I am
> using?
>
> JCR> In particular, how can I easily find out the following in use by the
> shell
> JCR> and the processes started by it?
>
> JCR> - the total size of all process's data segments
> JCR> - total resident memory size
> JCR> - the number of file descriptors I have in use (open files)
> JCR> - the total stack size I have in use
> JCR> - total CPU time in seconds
> JCR> - total number of processes (per this session)
> JCR> - total amount of virtual memory used by the shell
>
> JCR> Does the "maximum resident set size" limit for all processes or just
> one
> JCR> process? If for all, then how can I easily find out?
>
> JCR> What does "pipe size" mean? How can I know how much I am using?
>
> JCR> How do sh/bash ulimits or csh limits correlate with
> JCR> /etc/security/limits.conf, /etc/limits, /etc/login.defs (ULIMIT) or
> JCR> BSD-type login.conf session resource limits settings?
>
> JCR> Does anyone have any answers to any of these questions?
>
> JCR> Thanks
>
> JCR> Jeremy C. Reed
> JCR> http://www.reedmedia.net/
> JCR> http://bsd.reedmedia.net/
>
>
> JCR> --
> JCR> To UNSUBSCRIBE, email to debian-isp-request@lists.debian.org
> JCR> with a subject of "unsubscribe". Trouble? Contact
> listmaster@lists.debian.org
>
> Try the following kernel patch:
> http://www.asp-linux.com/
> It helped me in such a situation.
>
> --
> Regards,
> Ivan mailto:skywriter@rnc.ru
>
>
>
> --
> To UNSUBSCRIBE, email to debian-isp-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact
> listmaster@lists.debian.org
>
>
>
>
> --
> To UNSUBSCRIBE, email to debian-isp-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
>
--
Michael Bacarella <mbac@mmap.nyct.net> ;finger address for public key
GPG Key Fingerprint: B4E4 82F5 BCAC AB83 E6F7 B5AA 933E 2A75 79A4 A9C1
Reply to: