stumbled over a nasty (because not so obvious)
issue with vserver ULIMIT settings ...

ulimits work well if you start/stop the virtual
server (for everything running inside the vs),
but they are not applied if you enter the server
via "vserver <name> enter" or execute commands
via (su)exec ...

possible issues arising from that:

- services started/stopped from vs-enter will
  not be limitted by ulimits (set via the
  configuration file)
- programs started by such services (like
  cgi-scripts started from apache) will not
  be affected by these limits either

suggestions: add the ulimit to the vserver 
script enter/suexec/exec function ...

To Jacques: should be default, maybe with an
option to disable the ulimits?

best,
Herbert

Reply via email to