Hello,
basically I want to obtain the same on Solaris 10 someone obtained
putting the following lines into /etc/system on Solaris 9:
set shmsys:shminfo_shmmax=2147483647
set max_nprocs=1000
set rlim_fd_max=1024
set rlim_fd_cur=256
Now I tried to configure the above scenario on Solaris 10:
system:0::::project.max-file-descriptor=(basic,1024,deny);project.max-shm-ids=(privileged,1024,deny);project.max-shm-memory=(privileged,4294967296,deny);project.max-stack-size=(basic,16777216,deny);process.max-file-descriptor=(basic,1024,deny);process.max-shm-ids=(privileged,1024,deny);process.max-shm-memory=(privileged,4294967296,deny);process.max-stack-size=(basic,16777216,deny)
user.root:1::::project.max-file-descriptor=(basic,1024,deny);project.max-shm-ids=(privileged,1024,deny);project.max-shm-memory=(privileged,4294967296,deny);project.max-stack-size=(basic,16777216,deny);process.max-file-descriptor=(basic,1024,deny);process.max-shm-ids=(privileged,1024,deny);process.max-shm-memory=(privileged,4294967296,deny);process.max-stack-size=(basic,16777216,deny)
noproject:2::::project.max-file-descriptor=(basic,1024,deny);project.max-shm-ids=(privileged,1024,deny);project.max-shm-memory=(privileged,4294967296,deny);project.max-stack-size=(basic,16777216,deny);process.max-file-descriptor=(basic,1024,deny);process.max-shm-ids=(privileged,1024,deny);process.max-shm-memory=(privileged,4294967296,deny);process.max-stack-size=(basic,16777216,deny)
default:3::::process.max-file-descriptor=(basic,1024,deny);process.max-shm-ids=(privileged,1024,deny);process.max-shm-memory=(privileged,4294967296,deny);process.max-stack-size=(basic,16777216,deny);project.max-file-descriptor=(basic,1024,deny);project.max-shm-ids=(privileged,1024,deny);project.max-shm-memory=(privileged,4294967296,deny);project.max-stack-size=(basic,16777216,deny)
group.staff:10::::project.max-file-descriptor=(basic,1024,deny);project.max-shm-ids=(privileged,1024,deny);project.max-shm-memory=(privileged,4294967296,deny);project.max-stack-size=(basic,16777216,deny);process.max-file-descriptor=(basic,1024,deny);process.max-shm-ids=(privileged,1024,deny);process.max-shm-memory=(privileged,4294967296,deny);process.max-stack-size=(basic,16777216,deny)
And reboot the system. But after that I still see complaints in /var/adm/messages:
...
Aug 2 09:01:13 f0x09 genunix: [ID 883052 kern.notice] basic rctl process.max-file-descriptor (value 256) exceeded by process 4064
Aug 2 09:03:51 f0x09 genunix: [ID 883052 kern.notice] basic rctl process.max-stack-size (value 16777216) exceeded by process 6256
...
The process in questions in for example nscd or sshd when I log in with
a new terminal. What I don't get is the followin: I said max
file-descriptor is _1024_ not _256_. So did I specify the max wrong or
are their two instances (the one that is enforcing and the one that is
reporting) who doesn't know about the thresholds of each other. And I
get this messages just because there is some stupid process that wants
me to warn about that I use more than 256 filedescriptors. Trust me, I
know that. So what on earth is going on here?
Thomas
|