What are the ideal ulimit settings for root user in AIX?


 
Thread Tools Search this Thread
Operating Systems AIX What are the ideal ulimit settings for root user in AIX?
# 1  
Old 05-13-2014
What are the ideal ulimit settings for root user in AIX?

Hi,

what are the ideal/best/recommended ulimit settings for a root user in AIX?
I understand that it depends on our environment. But I would like to know...what are settings you guys use in your environment for best performance.

default:
Code:
        fsize = 2097151
        core = 2097151
        cpu = -1
        data = 262144
        rss = 65536
        stack = 65536
        nofiles = 2000

can i make it unlimited ? I tried changing it to unlimited. I do not see any issues so far from past few weeks.

my current settings

Code:
time(seconds)        unlimited
file(blocks)         unlimited
data(kbytes)         unlimited
stack(kbytes)        32768
memory(kbytes)       unlimited
coredump(blocks)     2097151
nofiles(descriptors) 9000
threads(per process) unlimited
processes(per user)  unlimited

can you please suggest the recommended settings based on your experience.

Thanks,

Last edited by Scrutinizer; 05-13-2014 at 04:06 PM.. Reason: code tags
# 2  
Old 05-13-2014
Were you having issues from it being limited?
# 3  
Old 05-13-2014
Its always better to have unlimited for root, as its the boss.
Moreover, when you do operations as root, you need those values at higher range.

Example: To transfer huge file(s), you need files (blocks) at very high value or better unlimited, because it will stop the transfer after it reach the defined value.

So, keep the boss smiling and you will be happy too.
This User Gave Thanks to ibmtech For This Post:
# 4  
Old 05-13-2014
@ Corona688
not really.

@ibmtech
thanks for your reply. I understand that unlimited needed for fsize parameter for transferring huge files. but i have doubt regarding the other parameter values like below

Code:
time(seconds) unlimited
file(blocks) unlimited
data(kbytes) unlimited
stack(kbytes) 32768
memory(kbytes) unlimited
threads(per process) unlimited
processes(per user) unlimited


Last edited by Scrutinizer; 05-13-2014 at 04:07 PM.. Reason: code tags
# 5  
Old 05-20-2014
As suggested by others why would you want to set limits for root? If you limit root you risk locking yourself out of the OS. Any applications running should run as a user created for the task, you can then apply limits to that user to protect the servers performance without risking blocking the root user.
Just today we had an application spin out of control and hit the limit of processes for the user account which had started the application. This meant that application support could not login to the server, but as root I was able to login and kill the rogue process.
# 6  
Old 05-20-2014
The limits are there to protect you. For a superuser account and indeed any other account, you have to ask yourself how much damage it could do by not having a limit.

I don't think that performance will come into it much unless your processing goes wild and an unlimited (or loosely limited) account starts grabbing all the system resources. This need not be a superuser either. We're had other software holding accounts grind a server to unusable. It's hard trying to escape even if you are already logged on as a superuser. Things like ps start failing and the like.

As a rule, I'd generally allow the least that I actually require.


Just my humble opinion though.

Robin
# 7  
Old 05-20-2014
@dluk @rbatte1

Thanks for your response. But am little confused here. please help me understand.

Do we need to set the limits to Unlimited for a root user ?
Can you please give ideal setting for root

Thanks
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. UNIX for Advanced & Expert Users

AIX change ulimit for a user

I have seen two different ways for changing the ulimit for a user in aix. Which one is better? Option 1 edit /etc/security/limits oracle: fsize = -1 data = -1 stack = -1 fsize_hard = -1 nofiles = -1 nofiles_hard = -1 Option 2 ... (6 Replies)
Discussion started by: cokedude
6 Replies

2. AIX

List of AIX commands that can be run by ROOT user ONLY

Hello, I am testing sudo and I want to test it. Can anyone please let me know few commands (of course other than shutdown, reboot etc. as I can't reboot the box) on AIX that can be run by ROOT only. Thanks ---------- Post updated at 07:43 PM ---------- Previous update was at 07:38 PM... (5 Replies)
Discussion started by: prvnrk
5 Replies

3. Red Hat

setting ulimit for a user

The root user runs the following ulimit -a | grep open and gets a result of open files (-n) 8162 A user runs the same command and gets a result of open files (-n) 2500 How can you set the ulimit of the user to... (2 Replies)
Discussion started by: jsanders
2 Replies

4. UNIX for Dummies Questions & Answers

Sudo to delegate permission from non-root user to another non-root user

I've been through many threads before i decide to create a separate thread. I can't really find the solution to my (simple) problem. Here's what I'm trying to achieve: As "canar" user I want to run a command, let's say "/opt/ocaml/bin/ocaml" as "duck" user. The only to achieve this is to... (1 Reply)
Discussion started by: canar
1 Replies

5. AIX

How do I killed ideal users from AIX 5.3 smit?

Hi, I'm newbee to AIX and would like to setup a process which kills 1 Hr. ideal users from smit. Please advise for making it work. :) Thanks, Sumit (2 Replies)
Discussion started by: sumit30
2 Replies

6. AIX

Block root user in system console - aix 5.3

How to block the root user login in system direct console. Users should login with non-root ids themselves and then use the su command to become root. Which configuration file i need to check and disable it. (5 Replies)
Discussion started by: kmvinay
5 Replies

7. AIX

AIX 6.1 Kernal Parameters ulimit

Hello, How can I setup the ulimit for memory permanent ulimit -m unlimited ulimit -a Output from the ulimit command should be similar to the following:time(seconds) unlimited file(blocks) unlimited data(kbytes) 2097152 stack(kbytes) 32768... (4 Replies)
Discussion started by: filosophizer
4 Replies

8. AIX

cant su to user or root AIX 5.3

Hi all, I cannt use 'su' to login to root or any other users though everything seems ok. I read some articles that says if you do recursive chmod 777 on /usr it can create this problem. I did the same. can anybody tell me how to repair it. Any ideas will be appreciated. thnks (7 Replies)
Discussion started by: itesh.dash
7 Replies

9. AIX

how to set the ulimit on AIX 5.2 version?

how to set the ulimit on AIX 5.2 version? (3 Replies)
Discussion started by: Shilpi
3 Replies

10. UNIX for Dummies Questions & Answers

How to change root's .profile settings

As a regular (non-root) user on Unix servers I'm accustomed to changing my .profile file to set paths that I frequently use, etc. I am trying to learn unix and set up a test server running SunOS 5.8. When I login as root I don't see a .profile file that belongs to root wherein I could change the... (1 Reply)
Discussion started by: FredSmith
1 Replies
Login or Register to Ask a Question

Featured Tech Videos