Date: Fri, 22 May 2020 19:01:10 +0200 From: Arrigo Triulzi <arrigo@...hemistowl.org> To: oss-security@...ts.openwall.com Subject: Re: Short notes on qmail security guarantee On 22 May 2020, at 17:45, Georgi Guninski <gguninski@...il.com> wrote: > I am not professional admin, but does postfix require limits? > Do many widely used daemons need limits? Well, normally these limits are enforced at the OS level. Depending on your OS of choice there are different ways in which this is done. On BSD-derived systems it is most often in /etc/login.conf via login classes, e.g.: daemon:\ :ignorenologin:\ :datasize=infinity:\ :maxproc=infinity:\ :openfiles-max=2048:\ :openfiles-cur=1024:\ :stacksize-cur=8M:\ :localcipher=blowfish,a:\ :tc=default: whereby the user under which Postfix runs would be assigned to the daemon class (or, of course, a class which you define with suitable restrictions) and have the limits above (“tc=default” means “inherit what is not explicitly defined above from the “default” class, rest is self-evident, I hope). Arrigo
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.