matthew/sonic-buildimage
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
bb65791060
sonic-buildimage/files/image_config
History
liuh-80 bb65791060
Add j2 template for enable pam_limit and limit SSH session (#10298) 
#### Why I did it
    When too many user login concurrently and run commands, SONiC may kernel panic on some device which has very limited memory.

#### How I did it
    Add j2 template for setup pam_limit plugin for limit SSH session per-user.

#### How to verify it
    Manually validate the j2 template can generate correct config file.

#### Which release branch to backport (provide reason below if selected)

- [x] 201811
- [ ] 201911
- [ ] 202006
- [x] 202012
- [x] 202106
- [x] 202111

#### Description for the changelog
    Add j2 template for setup pam_limit plugin for limit SSH session per-user.

#### A picture of a cute animal (not mandatory but encouraged)
2022-03-23 16:52:09 +08:00
..
apt [baseimage]: Download picocom version 3.1-2 from stretch-backports; No longer build from source (#1946) 2018-08-17 17:38:20 -07:00
asn [BGPD]: add bgp dynamic neighbor configuration (#708) 2017-06-21 18:52:50 -07:00
bash [baseimage]: Increase TMOUT for serial port connections to 15 minutes (#3032) 2019-06-19 19:07:36 +00:00
caclmgrd [caclmgrd] Always restart service upon process termination (#5065) 2020-08-31 20:31:13 +00:00
corefile_uploader corefile uploader: Updates per review comments offline (#3915) 2020-01-06 21:03:40 +00:00
cron.d [core_cleanup] Fix issue where core_cleanup job runs too frequently (#3659) 2019-10-24 17:04:16 +00:00
ebtables [ebtables] install ebtables in base image and install filter rules 2019-05-06 22:13:03 +00:00
environment [image]: Update login message (#706) 2017-06-14 15:18:02 -07:00
hostcfgd Add j2 template for enable pam_limit and limit SSH session (#10298) 2022-03-23 16:52:09 +08:00
hostname [hostname-config] improve hostname-config process (#3676) 2019-10-29 15:42:23 +00:00
interfaces [201811] [interfaces-config.sh] Flush the loopback interface addresses (#4234) 2020-03-09 16:14:59 -07:00
logrotate [logrotate] Enhance robustness (#2942) 2019-05-29 00:53:13 +00:00
monit [201811] disk_check.py: Change path to /usr/bin (#9074) 2021-10-26 18:22:10 -07:00
ntp [ntp] disable ntp long jump (#4748) 2020-06-11 22:03:22 +00:00
platform [port_config] Introduce ad-hoc mport_config.json file (#8275) 2021-07-29 10:41:31 +08:00
process-reboot-cause Revert "[201811] Check platform reboot cause to see if any reset happened during fast/warm-reboot (#8912)" (#10076) 2022-02-24 07:27:30 -08:00
rsyslog [rsyslog] Suppress duplicate messages from base image and all Docker containers (#2497) 2020-04-02 21:42:01 +00:00
snmp Remove extra trailing newlines at EOF (#804) 2017-07-12 20:54:37 -07:00
sudoers Fix vtysh shell-ingestion security issue (#7991) 2021-06-30 19:32:21 +08:00
syslog Fixed S6000 abrupt reboot in 201811 (#6923) 2021-03-12 11:09:54 -08:00
systemd [services] Restart SwSS service upon unexpected critical process exit (#2845) (#2852) 2019-07-29 18:10:26 -07:00
updategraph Add service to restore TACACS from old config (#7560) (#8233) 2021-08-02 10:33:55 -07:00
warmboot-finalizer [warmboot finalizer] load dhcpv6 copp rules when missing (#9048) 2021-10-25 08:05:55 -07:00
watchdog-control Correct the watch-control service to call the right script (#3906) 2019-12-14 09:42:36 -08:00