Sponsored Content
Operating Systems AIX What are the ideal ulimit settings for root user in AIX? Post 302902410 by rbatte1 on Tuesday 20th of May 2014 11:46:30 AM
Old 05-20-2014
The limits are there to protect you. For a superuser account and indeed any other account, you have to ask yourself how much damage it could do by not having a limit.

I don't think that performance will come into it much unless your processing goes wild and an unlimited (or loosely limited) account starts grabbing all the system resources. This need not be a superuser either. We're had other software holding accounts grind a server to unusable. It's hard trying to escape even if you are already logged on as a superuser. Things like ps start failing and the like.

As a rule, I'd generally allow the least that I actually require.


Just my humble opinion though.

Robin
 

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

How to change root's .profile settings

As a regular (non-root) user on Unix servers I'm accustomed to changing my .profile file to set paths that I frequently use, etc. I am trying to learn unix and set up a test server running SunOS 5.8. When I login as root I don't see a .profile file that belongs to root wherein I could change the... (1 Reply)
Discussion started by: FredSmith
1 Replies

2. AIX

how to set the ulimit on AIX 5.2 version?

how to set the ulimit on AIX 5.2 version? (3 Replies)
Discussion started by: Shilpi
3 Replies

3. AIX

cant su to user or root AIX 5.3

Hi all, I cannt use 'su' to login to root or any other users though everything seems ok. I read some articles that says if you do recursive chmod 777 on /usr it can create this problem. I did the same. can anybody tell me how to repair it. Any ideas will be appreciated. thnks (7 Replies)
Discussion started by: itesh.dash
7 Replies

4. AIX

AIX 6.1 Kernal Parameters ulimit

Hello, How can I setup the ulimit for memory permanent ulimit -m unlimited ulimit -a Output from the ulimit command should be similar to the following:time(seconds) unlimited file(blocks) unlimited data(kbytes) 2097152 stack(kbytes) 32768... (4 Replies)
Discussion started by: filosophizer
4 Replies

5. AIX

Block root user in system console - aix 5.3

How to block the root user login in system direct console. Users should login with non-root ids themselves and then use the su command to become root. Which configuration file i need to check and disable it. (5 Replies)
Discussion started by: kmvinay
5 Replies

6. AIX

How do I killed ideal users from AIX 5.3 smit?

Hi, I'm newbee to AIX and would like to setup a process which kills 1 Hr. ideal users from smit. Please advise for making it work. :) Thanks, Sumit (2 Replies)
Discussion started by: sumit30
2 Replies

7. UNIX for Dummies Questions & Answers

Sudo to delegate permission from non-root user to another non-root user

I've been through many threads before i decide to create a separate thread. I can't really find the solution to my (simple) problem. Here's what I'm trying to achieve: As "canar" user I want to run a command, let's say "/opt/ocaml/bin/ocaml" as "duck" user. The only to achieve this is to... (1 Reply)
Discussion started by: canar
1 Replies

8. Red Hat

setting ulimit for a user

The root user runs the following ulimit -a | grep open and gets a result of open files (-n) 8162 A user runs the same command and gets a result of open files (-n) 2500 How can you set the ulimit of the user to... (2 Replies)
Discussion started by: jsanders
2 Replies

9. AIX

List of AIX commands that can be run by ROOT user ONLY

Hello, I am testing sudo and I want to test it. Can anyone please let me know few commands (of course other than shutdown, reboot etc. as I can't reboot the box) on AIX that can be run by ROOT only. Thanks ---------- Post updated at 07:43 PM ---------- Previous update was at 07:38 PM... (5 Replies)
Discussion started by: prvnrk
5 Replies

10. UNIX for Advanced & Expert Users

AIX change ulimit for a user

I have seen two different ways for changing the ulimit for a user in aix. Which one is better? Option 1 edit /etc/security/limits oracle: fsize = -1 data = -1 stack = -1 fsize_hard = -1 nofiles = -1 nofiles_hard = -1 Option 2 ... (6 Replies)
Discussion started by: cokedude
6 Replies
GRAB-ACCOUNT(8) 						 chiark utilities						   GRAB-ACCOUNT(8)

NAME
grab-account - add new account synchronised to remote system SYNOPSIS
grab-account local-user source [remote-user] DESCRIPTION
grab-account reconfigures sync-accounts to start synchronising a specified local user (which may not yet exist) from a specified remote system, and then invokes sync-accounts once to synchronise from that source. /etc/sync-accounts/createuser should contain a addhere line in the appropriate source section (ie, after host source). grab-account adds a user local-user [remote=remote-user] directive just before addhere and runs sync-accounts source. EXIT STATUS
0 All went well. any other There were problems. FILES
/etc/sync-accounts; See also sync-accounts(8). ENVIRONMENT
See sync-accounts(8). BUGS
There is no locking of /etc/sync-accounts so do not invoke grab-account from a script, or more than once at a time by hand. Do not edit /etc/sync-accounts by hand and also simultaneously run grab-account. The mechanism involving addhere is suboptimal. This should be done with an include feature in sync-accounts, so that grab-account does not have to edit a configuration file that really belongs to the sysadmin. AUTHOR
grab-account and this manpage are part of the sync-accounts package which was written by Ian Jackson <ian@chiark.greenend.org.uk>. They are Copyright 1999-2000,2002 Ian Jackson <ian@davenant.greenend.org.uk>, and Copyright 2000-2001 nCipher Corporation Ltd. The sync-accounts package is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3, or (at your option) any later version. This is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, consult the Free Software Foundation's website at www.fsf.org, or the GNU Project website at www.gnu.org. SEE ALSO
sync-accounts(8), sync-accounts(5), passwd(5) Greenend 14th July 2002 GRAB-ACCOUNT(8)
All times are GMT -4. The time now is 04:32 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy