Commit Graph

2 Commits (056c13c417461a3b9eaf0cc7f60d7b442912c25a)

Author SHA1 Message Date
Philippe Antoine a003640ecf security: prevents process creation
with setrlimit NPROC.

So that, if Suricata wants to execve or such to create a new process
the OS will forbid it so that RCE exploits are more painful to write.

Ticket: #5373
3 years ago
Eric Leblond 1b24f4d357 doc: document landlock feature 3 years ago