Re: [cgiwrap-users] limiting memory usage for PHP as CGI
Brought to you by:
nneul
From: Peter M. J. <pe...@cl...> - 2004-04-22 19:20:23
|
On Thu, 22 Apr 2004, Florian Effenberger wrote: > Thanks for your reply. Isn't there anything I can do without patching the > kernel? Maybe something in httpd.conf or via cgiwrap? Or is there generally > no protection against such an "attack"? I've successfully used "RLimitCPU 10 20" in Apache 2.x on Linux to constrain all CGI processes to no more than 20 seconds of CPU, and I run PHP scripts as CGI to gain UID isolation. I've never tried the RLimitMEM. Could it be that, when you configured it, you used the wrong units? Perhaps it needs pages rather than bytes or something. |