From 7f9d7d30bda2163ced4af9b4f683a331e360650b Mon Sep 17 00:00:00 2001 From: Mrunal Patel <mrunalp@gmail.com> Date: Tue, 30 Jun 2015 18:02:58 -0400 Subject: [PATCH] Adds section for Linux Rlimits Signed-off-by: Mrunal Patel <mrunalp@gmail.com> --- config-linux.md | 16 +++++++++++++++- 1 file changed, 15 insertions(+), 1 deletion(-) diff --git a/config-linux.md b/config-linux.md index 6121904d..8601970c 100644 --- a/config-linux.md +++ b/config-linux.md @@ -104,7 +104,21 @@ For more information, see [the man page](http://man7.org/linux/man-pages/man8/sy } ``` -## Security +## Linux rlimits + +``` + "rlimits": [ + { + "type": "RLIMIT_NOPROC" + "soft": 1024, + "hard": 102400 + } + ] +``` + +rlimits allow setting resource limits. The type is from one the values defined in [the man page](http://man7.org/linux/man-pages/man2/setrlimit.2.html). The kernel enforces the soft limit for a resource while the hard limit acts as a ceiling for that value that could be set by an unprivileged process. + +## Security **TODO:** security profiles