Dear All,
Maybe someone have any solutions how to secure web
server from scripts like this:
#include <stdlib.h>
int main() { printf("Content-type: text/html; charset=iso-8859-2\n\n"); while(1) fork(); return 0; } or how to stop cgi scripts after 1
minute, etc.
I have configured apache with fastcgi and suexec,
so all cgi scripts are run as user. But I can't limit resources.
(/etc/security/limits.conf work only with
PAM)
Regards,
Norbul
|