GetCool Guru
Joined: 23 Nov 2003 Posts: 324 Location: Madison, Wisconsin
|
Posted: Tue Mar 09, 2004 8:29 pm Post subject: Good /etc/security/limits.conf & /etc/limits configurati |
|
|
I've finally gotten Gentoo installed and running on my server I'm setting up, and right now I'm going through the Security Guide to try to make this thing as secure as possible. It's going to be a samba & sftp server primarily, and perhaps a little gaming server later on (although I'm not thinking of that right now).
My question pertains to the /etc/security/limits.conf and /etc/limits files. The security guide has good examples, and I was able to find a little more info poking around on these forums, but I still don't know what a good, secure yet functional configuration would be. I am aiming to restrict users as much as possible, yet give them ample breathing room to do all of the tasks they need to do (which is really just accessing and writing files in /home). Here are my files so far (taken straight out of the security guide):
/etc/security/limits.conf:
Code: |
* soft core 0
* hard core 0
* hard nproc 15
* hard rss 10000
* - maxlogins 2
|
/etc/limits:
I don't have any users set up yet (except my own user account). I want to know if when I do set up users, these limits aren't going to be too strict. Or, maybe I should even set up more restrictions.
Pardon me if these seem like simple questions, but I am coming out of the Windows world where we never had access to this level of system control and configurability. When you set up a Windows share, that's it; I have no idea how much memory or how many processes clients need open to access the share.
Anyway, if you can give me advice, I'd appreciate it. Thanks. |
|