From 310995493a17a40ae92c6fb92f3dbc0127818df6 Mon Sep 17 00:00:00 2001 From: Jonas Smedegaard Date: Thu, 14 Mar 2002 14:19:08 +0000 Subject: TODO: Add comment about max files open. --- TODO | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'TODO') diff --git a/TODO b/TODO index b734fa2..b2a7557 100644 --- a/TODO +++ b/TODO @@ -6,6 +6,11 @@ Add squid support: Search /etc/squid.conf for "YOUR OWN RULE" and add "acl local Add integrit support: Remove all relevant comments in /etc/integrit/integrit.conf and "# ! " in /etc/cron.daily.integrit. Implement meta-hints about filesharing: ftp should use "-l" and "~ users" when default users are dummy users. And the local user-init, adduser.local and deluser.local should be generic. Figure out if bind or bind9 is installed as nameserver (currently both are reloaded, which is non-optimal and _can_ lead to errors) +Calibrate max open files based on available memory (as suggested at http://www.linuxdoc.org/LDP/solrhe/Securing-Optimizing-Linux-RH-Edition-v1.3/chap6sec72.html and http://www.xenoclast.org/doc/benchmark/HTTP-benchmarking-HOWTO/node7.html): + FILEMAX = (INSTALLED_RAM*256)/4 + /etc/sysctl.conf: fs.file-max = FILEMAX + /etc/security/limits.conf: * soft nofile 1024 + /etc/security/limits.conf: * hard nofile FILEMAX Xenux: ------ -- cgit v1.2.3