Question

I have a server and I have to allow remote SSH to users for some purpose. I want to tighten up the shell against any kind of fork bomb on it. How can I do this ? I’m expecting a solution based on restricting the CPU usage of a particular user.

Answer 1

This is what you are looking for

http://linux.die.net/man/5/limits.conf

You can do something like

@remote_user            hard    cpu             50
@remote_user            hard    nproc           50

Thereby limiting both the CPU usage and the number of processes the remote_user can create.