AWS linux documentation change
Summary
Removed 'cpulimit' from package list (possible typo fix) and added link to AL2023 systemd resource limiting documentation
Security assessment
The change adds documentation about using systemd for resource control (security feature to prevent resource exhaustion). No concrete evidence of addressing a specific security vulnerability in the cpulimit removal, which appears to be a formatting correction.
Diff
diff --git a/linux/al2023/ug/epel.md index e4a062e63..2e15b1aa0 100644 --- a/linux/al2023/ug/epel.md +++ b/linux/al2023/ug/epel.md @@ -5 +5 @@ -axel - HTTP/FTP clientbrotli and libbrotli - compressioncollectd - Statistics collection daemoncpulimit - CPU Usage limiterexim - mail transfer agentfuse3 - File System in Userspace (FUSE) v3ganglia - Distributed Monitoring Systemgit-lfs - version control large files with Githaveged - an entropy source using the HAVEGE algorithminotify-tools - inotify command line toolsiperf - TCP/UDP Performance benchmarkjemalloc - alternative malloc implementationlibbsd - BSD-compatible function librarylibserf - HTTP Client Librarylibzstd - zstd compression librarylighttpd web serverlshell - a restricted shellmonit - process, file, directory, and devices monitornodejsperl-Config-Generalpython2-lockfile - file lockingpython2-rsa - pure Python RSApython2-simplejson - JSON routines for Python 2rkhunter - Rootkit Hunterrssh - a restricted shell for use with OpenSSHsscg - self-signed SSL certificate generatorstress - Stress teststress-ng - Stress testtmpwatch - removes files based on last accessed timexmlstarlet - command line XML utilities +axel - HTTP/FTP clientbrotli and libbrotli - compressioncollectd - Statistics collection daemoncpulimitexim - mail transfer agentfuse3 - File System in Userspace (FUSE) v3ganglia - Distributed Monitoring Systemgit-lfs - version control large files with Githaveged - an entropy source using the HAVEGE algorithminotify-tools - inotify command line toolsiperf - TCP/UDP Performance benchmarkjemalloc - alternative malloc implementationlibbsd - BSD-compatible function librarylibserf - HTTP Client Librarylibzstd - zstd compression librarylighttpd web serverlshell - a restricted shellmonit - process, file, directory, and devices monitornodejsperl-Config-Generalpython2-lockfile - file lockingpython2-rsa - pure Python RSApython2-simplejson - JSON routines for Python 2rkhunter - Rootkit Hunterrssh - a restricted shell for use with OpenSSHsscg - self-signed SSL certificate generatorstress - Stress teststress-ng - Stress testtmpwatch - removes files based on last accessed timexmlstarlet - command line XML utilities @@ -133 +133 @@ In Amazon Linux 2023, `systemd` provides functionality to limit the CPU usage of -There are powerful resource control facilities provided by `systemd` which can be used to ensure any task or group of tasks is limited in what resources it can consume. For more information, see [systemd.resource-control](https://www.freedesktop.org/software/systemd/man/latest/systemd.resource-control.html). +There are powerful resource control facilities provided by `systemd` which can be used to ensure any task or group of tasks is limited in what resources it can consume. For more information, see the upstream [systemd.resource-control](https://www.freedesktop.org/software/systemd/man/latest/systemd.resource-control.html) documentation, along with the [Limiting process resource usage in AL2023 using systemd](./resource-limiting-systemd.html).