[eugene@securityarchitects.com: Re: Preventing exploitation with rebasing]

2003-02-04 Thread Justin Lundy
Has similar work been done in FreeBSD been done? This would be a nice feature in 5.0-CURRENT. We had SecureBSD, and the IBM port of propolice, but both projects appear to be defunct at present. If we can integrate MAC into the kernel, why not port over OpenBSD's rebasing implementation from /src/s

Re: Problem: Too Many open files

2002-10-01 Thread Justin Lundy
You are running out of file descriptors. Tune your kern.maxfiles and kern.maxfilesperproc sysctl values to allow the system to open more. I had a similar problem after creating 3,400 virtual hosts in Apache on one of our production servers. Here is a blockquote from Section 6.10.1 File/Process L