Skip to content
This repository
branch: master
Fetching contributors…

Octocat-spinner-32-eaf2f5

Cannot retrieve contributors at this time

file 35 lines (29 sloc) 1.053 kb
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34
#################
## RLIMITS
#################

## evidently not all versions of apparmor support setting this rlimit. it's okay
## because we kill -9 if user time overruns this.
# set rlimit cpu <= 15,

  set rlimit fsize <= 0,
  set rlimit data <= 80M,
  set rlimit stack <= 80M,
  set rlimit core <= 0,
  set rlimit rss <= 5,
  set rlimit memlock <= 0,
  set rlimit msgqueue <= 0,
  set rlimit locks <= 0,
  set rlimit sigpending <= 2,
  set rlimit nproc <= 0,
  set rlimit rtprio <= 0,

# larger for DLLs
  set rlimit as <= 300M,

# 1 greater than max
  set rlimit nofile <= 101,

## so, nice values are confusing. 20 is low priority, -19 is high priority.
## here, we really want to enforce that the nice value is never less than 5,
## but the app armor configuration parser complains "expecting TOK_LE" if you
## use TOK_GE. so, maybe <= is just the wrong symbol to use for this config file
## to specify a limit? i absolutely don't want to enforce that the application
## is always 5 or lower niceness.
## TODO: revisit
# set rlimit nice <= 5,
Something went wrong with that request. Please try again.