On Mon 02-04-18 15:45:19, Li RongQing wrote: > we cannot limit a process RSS although there is ulimit -m, > not sure why and when ulimit -m is not working, make it work Could you be more specific about why do you need this functionality? The RSS limit has never been implemented AFAIK and the main reason is that the semantic is quite weak to be useful (e.g. the shared memory accounting, resident memory that is not mapped etc.). We have memory cgroup controller as an alternative. -- Michal Hocko SUSE Labs