diff options
| author | Havoc Pennington <hp@redhat.com> | 2003-04-24 22:30:38 +0000 |
|---|---|---|
| committer | Havoc Pennington <hp@redhat.com> | 2003-04-24 22:30:38 +0000 |
| commit | 3185d7edde8ffc7672aa7d771966b0f1e0158aea (patch) | |
| tree | 03f33d4ca7737d26badd04f2fd6ee95db0ffdba7 /doc | |
| parent | 1820f3bd0a5a4b0ab14dbcc80ba1b68d2c48e01d (diff) | |
2003-04-24 Havoc Pennington <hp@redhat.com>
* test/data/valid-config-files/basic.conf: add <limit> tags to
this test
* bus/config-parser.h, bus/config-parser.c, bus/bus.c: Implement
<limit> tag in configuration file.
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/config-file.txt | 30 |
1 files changed, 29 insertions, 1 deletions
diff --git a/doc/config-file.txt b/doc/config-file.txt index 62bb4137..ed3cdfab 100644 --- a/doc/config-file.txt +++ b/doc/config-file.txt @@ -131,7 +131,35 @@ Elements: Appears below a <policy> element and establishes a resource limit. For example: <limit name="max_message_size">64</limit> - <limit name="max_connections">512</limit> + <limit name="max_completed_connections">512</limit> + + Available limits are: + "max_incoming_bytes" : total size in bytes of messages + incoming from a connection + "max_outgoing_bytes" : total size in bytes of messages + queued up for a connection + "max_message_size" : max size of a single message in + bytes + "activation_timeout" : milliseconds (thousandths) until + an activated service has to connect + "auth_timeout" : milliseconds (thousandths) a + connection is given to + authenticate + "max_completed_connections" : max number of authenticated connections + "max_incomplete_connections" : max number of unauthenticated + connections + "max_connections_per_user" : max number of completed connections from + the same user + + Some notes: + + - the max incoming/outgoing queue sizes allow a new message + to be queued if one byte remains below the max. So you can + in fact exceed the max by max_message_size + + - max_completed_connections / max_connections_per_user is + the number of users that can work together to DOS all + other users by using up all connections <deny> send="messagename" |