Re: [gentoo-hardened] Limits

[Christian Gut]

On Son, 2003-06-08 at 02:22, Chris PeBenito wrote:

> > Oh, and by the way: I noticed that SELinux Gentoo-style comes with
> > duplicate configuration files. The limits file, for instance, is to be
> > found in /etc and in /etc/security. Is there a reason for this? And
> > which of the two files are actually used by the system?
>
> Well I see /etc/limits and /etc/security/limits.conf on all of my
> systems, its not something that SELinux is needing.  BTW, /etc/security
> isn't just used for selinux stuff.  /etc/limits comes from
> sys-apps/shadow and /etc/security/limits.conf comes from sys-libs/pam.
> I'm not sure exactly how their uses differ.


from limits(5):
NAME
       limits - Resource limits definition

DESCRIPTION
       The  limits  file  (/etc/limits  by default or LIMITS_FILE
defined config.h) describes the resource limits you wish to impose. It
should  be owned by root and readable by root account only.

this is used by login(1)


/etc/security/* is used by pam. I think its the more powerfull one

There's a little section in the security guide on gentoo.org

-- 
Christian Gut <cycloon@×××××××.org>