Resource Limits

• classic UNIX ulimits; can't raise without CAP_SYS_ADMIN
• max. memory used (rss, locked, virtual memory, data, stack)
• max. file size (& core size)
• max. user processes
• max. CPU time