[Pkg-shadow-devel] shadow-4.1.4.3, process limits and fork bombs

Andrew Benton b3nton at gmail.com
Sun Oct 9 13:58:15 UTC 2011


Hello,

With shadow-4.1.4.3 I can't limit the number of processes a user can
spawn. With shadow-4.0.18.1 I can and a fork bomb does no harm.

I use Linux From Scratch, shadow was compiled from the source.
http://www.linuxfromscratch.org/lfs/view/development/chapter06/shadow.html

I've tried with and without linux-PAM-1.1.4. The result is the same;
shadow-4.0.18.1 works but with shadow-4.1.4.3 a fork bomb locks up the
system hard.

Without PAM I echo \* U128 >> /etc/limits
With PAM I echo \* hard nproc 128 >> /etc/security/limits.conf

I would prefer to use the current version of shadow so I'm happy to
help debug the problem. I'm not a programmer so it will take me a long
time to figure out on my own. Please CC me in any replies as I'm not
subscribed to the list.

Andy



More information about the Pkg-shadow-devel mailing list