Something went wrong. Try again.
Linux kernel mirror (for testing) git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Something went wrong. Try again.
2.6 kB · 84 lines
at master
12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485=================================Documentation for /proc/sys/user/=================================
kernel version 4.9.0
Copyright (c) 2016 Eric Biederman <ebiederm@xmission.com>
------------------------------------------------------------------------------
This file contains the documentation for the sysctl files in/proc/sys/user.
The files in this directory can be used to override the defaultlimits on the number of namespaces and other objects that haveper user per user namespace limits.
The primary purpose of these limits is to stop programs thatmalfunction and attempt to create a ridiculous number of objects,before the malfunction becomes a system wide problem. It is theintention that the defaults of these limits are set high enough thatno program in normal operation should run into these limits.
The creation of per user per user namespace objects are charged tothe user in the user namespace who created the object andverified to be below the per user limit in that user namespace.
The creation of objects is also charged to all of the userswho created user namespaces the creation of the object happensin (user namespaces can be nested) and verified to be below the per userlimits in the user namespaces of those users.
This recursive counting of created objects ensures that creating auser namespace does not allow a user to escape their current limits.
Currently, these files are in /proc/sys/user:
max_cgroup_namespaces=====================
The maximum number of cgroup namespaces that any user in the current user namespace may create.
max_ipc_namespaces==================
The maximum number of ipc namespaces that any user in the current user namespace may create.
max_mnt_namespaces==================
The maximum number of mount namespaces that any user in the current user namespace may create.
max_net_namespaces==================
The maximum number of network namespaces that any user in the current user namespace may create.
max_pid_namespaces==================
The maximum number of pid namespaces that any user in the current user namespace may create.
max_time_namespaces===================
The maximum number of time namespaces that any user in the current user namespace may create.
max_user_namespaces===================
The maximum number of user namespaces that any user in the current user namespace may create.
max_uts_namespaces==================
The maximum number of user namespaces that any user in the current user namespace may create.