mirror of
https://git.hardenedbsd.org/hardenedbsd/HardenedBSD.git
synced 2024-11-17 08:00:48 +01:00
e6373c9ec0
via sysctl(8). The initial value of maxprocperuid is maxproc-1, that of maxfilesperproc is maxfiles (untill maxfile will disappear) Now it is at least possible to prohibit one user opening maxfiles -Guido Submitted by: Obtained from:
198 lines
6.0 KiB
C
198 lines
6.0 KiB
C
/*
|
|
* Copyright (c) 1980, 1986, 1989, 1993
|
|
* The Regents of the University of California. All rights reserved.
|
|
* (c) UNIX System Laboratories, Inc.
|
|
* All or some portions of this file are derived from material licensed
|
|
* to the University of California by American Telephone and Telegraph
|
|
* Co. or Unix System Laboratories, Inc. and are reproduced herein with
|
|
* the permission of UNIX System Laboratories, Inc.
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions
|
|
* are met:
|
|
* 1. Redistributions of source code must retain the above copyright
|
|
* notice, this list of conditions and the following disclaimer.
|
|
* 2. Redistributions in binary form must reproduce the above copyright
|
|
* notice, this list of conditions and the following disclaimer in the
|
|
* documentation and/or other materials provided with the distribution.
|
|
* 3. All advertising materials mentioning features or use of this software
|
|
* must display the following acknowledgement:
|
|
* This product includes software developed by the University of
|
|
* California, Berkeley and its contributors.
|
|
* 4. Neither the name of the University nor the names of its contributors
|
|
* may be used to endorse or promote products derived from this software
|
|
* without specific prior written permission.
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
|
|
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
* ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
|
|
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
|
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
|
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
|
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
|
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
|
* SUCH DAMAGE.
|
|
*
|
|
* @(#)param.c 8.2 (Berkeley) 1/21/94
|
|
* $Id: param.c,v 1.7 1995/02/16 11:29:19 joerg Exp $
|
|
*/
|
|
|
|
#include <sys/param.h>
|
|
#include <sys/systm.h>
|
|
#include <sys/socket.h>
|
|
#include <sys/proc.h>
|
|
#include <sys/vnode.h>
|
|
#include <sys/file.h>
|
|
#include <sys/callout.h>
|
|
#include <sys/clist.h>
|
|
#include <sys/mbuf.h>
|
|
#include <sys/kernel.h>
|
|
|
|
#include <ufs/ufs/quota.h>
|
|
|
|
#ifdef SYSVSHM
|
|
#include <machine/vmparam.h>
|
|
#include <sys/shm.h>
|
|
#endif
|
|
#ifdef SYSVSEM
|
|
#include "sys/sem.h"
|
|
#endif
|
|
#ifdef SYSVMSG
|
|
#include "sys/msg.h"
|
|
#endif
|
|
|
|
/*
|
|
* System parameter formulae.
|
|
*
|
|
* This file is copied into each directory where we compile
|
|
* the kernel; it should be modified there to suit local taste
|
|
* if necessary.
|
|
*
|
|
* Compiled with -DHZ=xx -DTIMEZONE=x -DDST=x -DMAXUSERS=xx
|
|
*/
|
|
|
|
#ifndef HZ
|
|
#define HZ 100
|
|
#endif
|
|
int hz = HZ;
|
|
int tick = 1000000 / HZ;
|
|
int tickadj = 30000 / (60 * HZ); /* can adjust 30ms in 60s */
|
|
struct timezone tz = { TIMEZONE, DST };
|
|
#define NPROC (20 + 16 * MAXUSERS)
|
|
int maxproc = NPROC; /* maximum # of processes */
|
|
int maxprocperuid = NPROC-1; /* maximum # of processes per user */
|
|
int maxfiles = NPROC*2; /* system wide open files limit */
|
|
int maxfilesperproc = NPROC*2; /* system wide open files limit */
|
|
int ncallout = 16 + NPROC; /* maximum # of timer events */
|
|
int nmbclusters = NMBCLUSTERS;
|
|
int fscale = FSCALE; /* kernel uses `FSCALE', user uses `fscale' */
|
|
|
|
/*
|
|
* Values in support of System V compatible shared memory. XXX
|
|
*/
|
|
#ifdef SYSVSHM
|
|
#ifndef SHMMAX
|
|
#define SHMMAX (SHMMAXPGS*NBPG)
|
|
#endif
|
|
#ifndef SHMMIN
|
|
#define SHMMIN 1
|
|
#endif
|
|
#ifndef SHMMNI
|
|
#define SHMMNI 32 /* <= SHMMMNI in shm.h */
|
|
#endif
|
|
#ifndef SHMSEG
|
|
#define SHMSEG 8
|
|
#endif
|
|
#ifndef SHMALL
|
|
#define SHMALL (SHMMAXPGS/CLSIZE)
|
|
#endif
|
|
|
|
struct shminfo shminfo = {
|
|
SHMMAX,
|
|
SHMMIN,
|
|
SHMMNI,
|
|
SHMSEG,
|
|
SHMALL
|
|
};
|
|
#endif
|
|
|
|
/*
|
|
* Values in support of System V compatible semaphores.
|
|
*/
|
|
|
|
#ifdef SYSVSEM
|
|
|
|
struct seminfo seminfo = {
|
|
SEMMAP, /* # of entries in semaphore map */
|
|
SEMMNI, /* # of semaphore identifiers */
|
|
SEMMNS, /* # of semaphores in system */
|
|
SEMMNU, /* # of undo structures in system */
|
|
SEMMSL, /* max # of semaphores per id */
|
|
SEMOPM, /* max # of operations per semop call */
|
|
SEMUME, /* max # of undo entries per process */
|
|
SEMUSZ, /* size in bytes of undo structure */
|
|
SEMVMX, /* semaphore maximum value */
|
|
SEMAEM /* adjust on exit max value */
|
|
};
|
|
#endif
|
|
|
|
/*
|
|
* Values in support of System V compatible messages.
|
|
*/
|
|
|
|
#ifdef SYSVMSG
|
|
|
|
struct msginfo msginfo = {
|
|
MSGMAX, /* max chars in a message */
|
|
MSGMNI, /* # of message queue identifiers */
|
|
MSGMNB, /* max chars in a queue */
|
|
MSGTQL, /* max messages in system */
|
|
MSGSSZ, /* size of a message segment */
|
|
/* (must be small power of 2 greater than 4) */
|
|
MSGSEG /* number of message segments */
|
|
};
|
|
#endif
|
|
|
|
/*
|
|
* These are initialized at bootstrap time
|
|
* to values dependent on memory size
|
|
*/
|
|
int nbuf, nswbuf;
|
|
|
|
/*
|
|
* These have to be allocated somewhere; allocating
|
|
* them here forces loader errors if this file is omitted
|
|
* (if they've been externed everywhere else; hah!).
|
|
*/
|
|
struct callout *callout;
|
|
struct cblock *cfree;
|
|
struct buf *buf, *swbuf;
|
|
char *buffers;
|
|
|
|
/*
|
|
* Proc/pgrp hashing.
|
|
* Here so that hash table sizes can depend on MAXUSERS/NPROC.
|
|
* Hash size must be a power of two.
|
|
* NOW omission of this file will cause loader errors!
|
|
*/
|
|
|
|
#if NPROC > 1024
|
|
#define PIDHSZ 512
|
|
#else
|
|
#if NPROC > 512
|
|
#define PIDHSZ 256
|
|
#else
|
|
#if NPROC > 256
|
|
#define PIDHSZ 128
|
|
#else
|
|
#define PIDHSZ 64
|
|
#endif
|
|
#endif
|
|
#endif
|
|
|
|
struct proc *pidhash[PIDHSZ];
|
|
struct pgrp *pgrphash[PIDHSZ];
|
|
int pidhashmask = PIDHSZ - 1;
|