OffHand, it's far from easy to get this right. Current Linux PAM is just not flexible enough for that, and I doubt that there is a default restriction scheme which fits everywhere. (See comment 1)
-- Consider setting more restrictive default resource limits https://launchpad.net/bugs/14505 -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs