From: Lyashkov Alexey (shadow_at_itt.net.ru)
Date: Fri 03 Jan 2003 - 12:09:45 GMT
Hello Michael,
Friday, January 03, 2003, 1:23:13 PM, you wrote:
MH> Hallo,
MH> I'm searching for informations about the caps and ULIMIT functions.
MH> I'd like to know if and how its possible to reduce the max used Number
MH> of kbytes a vserver is allowed to use.
MH> ULIMIT="-H -u 50 memorysize 50000"
MH> (50 MB) dont work.
offical version vserver not support memory limit.
Jacques make a promise add it in next releases patch.
But you will use patch for RH kernels with vserver limit
tools. it`s supported per context memory limit.
MH> Also i missed information about the caps in vserver docu and faq. Aswell
MH> in the Manpages i cant find further information about each caps
MH> (functions and risks).
MH> Can an attacker reach the root Server with those caps:
MH> S_CAPS="CAP_SYS_RESOURCE CAP_NET_RAW"
-- Best regards, Lyashkov mailto:shadow_at_itt.net.ru