hasher-priv.conf(5)

HASHER-PRIV configuration(5)

ALT Linux

HASHER-PRIV configuration(5)

NAME

/etc/hasher-priv/ - configuration for the hasher-priv program

DESCRIPTION

/etc/hasher-priv/ is used to control various aspects of hasher-priv(8) behaviour.

hasher-priv(8) first loads systemwide config file /etc/hasher-priv/system, then it loads per-user config file /etc/hasher-priv/user.d/USER, and finally, if subconfig identifier NUMBER is specified, it loads per-user per-number subconfig file /etc/hasher-priv/user.d/USER:NUMBER.

FORMAT

The format of each config file is very simple. Each line is either a comment or a directive. Comment lines start with a # character and are ignored. A directive line has the format:

option=value

It is not an error to put any space between the option, = and value. Both option and its value are case-insensitive.

Each setting has a compiled in default which may be modified in the configuration file.

NUMERIC OPTIONS

Below is a list of numeric options. A numeric option must be set to a non negative integer.

umask: The value (octal number) that the umask for child process is set.
Default: 022
nice: Add specified value to the nice value for child process. This value should not exceed OS limitation (19).
Default: 8
rlimit_hard_cpu, rlimit_soft_cpu: Per-process CPU limit, in seconds.
Default: (none)
rlimit_hard_fsize, rlimit_soft_fsize: Largest file that can be created, in bytes.
Default: (none)
rlimit_hard_data, rlimit_soft_data: Maximum size of data segment, in bytes.
Default: (none)
rlimit_hard_stack, rlimit_soft_stack: Maximum size of stack segment, in bytes.
Default: (none)
rlimit_hard_core, rlimit_soft_core: Largest core file that can be created, in bytes.
Default: (none)
rlimit_hard_rss, rlimit_soft_rss: Largest resident set size, in bytes.
Default: (none)
rlimit_hard_nproc, rlimit_soft_nproc: Number of processes.
Default: (none)
rlimit_hard_nofile, rlimit_soft_nofile: Number of open files.
Default: (none)
rlimit_hard_memlock, rlimit_soft_memlock: Locked-in-memory address space.
Default: (none)
rlimit_hard_as, rlimit_soft_as: Address space limit.
Default: (none)
rlimit_hard_locks, rlimit_soft_locks: Maximum number of file locks.
Default: (none)
wlimit_time_elapsed: This option limits total execution time, in seconds.
Default: (none)
wlimit_time_idle: This option specifies idle time limit, in seconds. Idle time is a period when child process produces no output.
Default: (none)
wlimit_bytes_written: This option limits amount of output generated by child process, in bytes.
Default: (none)

STRING OPTIONS

Below is a list of string options.

user1: This option specifies name of the first pseudouser.
Default: (none)
user2: This option specifies name of the second pseudouser.
Default: (none)
prefix: This option specifies colon-separated list of prefixes allowed for build chroot. It affects all hasher-priv(8) modes which accept chroot parameter.
Hardcoded default: (none)
System default: ~:/tmp/.private
allowed_devices: This option specifies a comma-separated list of devices which are allowed to be specified to “hasher-priv chrootuid1” and “hasher-priv chrootuid2” commands using requested_mountpoints environment variable.
Default: (none)
allowed_mountpoints: This option specifies a comma-separated list of mount points which are allowed to be specified to “hasher-priv chrootuid1” and “hasher-priv chrootuid2” commands using requested_mountpoints environment variable.
Default: (none)

FILES

/etc/hasher-priv/system: systemwide config file
/etc/hasher-priv/user.d/USER: per-user config files
/etc/hasher-priv/user.d/USER:NUMBER: per-user per-number subconfig files

AUTHOR

Written by Dmitry V. Levin <ldv@altlinux.org>

REPORTING BUGS

Report bugs to http://bugs.altlinux.ru/

COPYRIGHT

Copyright © 2003-2019 Dmitry V. Levin <ldv@altlinux.org>
This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.