> >	3) But with the one slot, a sysadmin could regain the system.
> 
> I don't think that there is any general consensus here that upping
> the number of root-only slots is a bad idea.

I did wonder whether these last few slots shouldn't be used for:
1) processes that already have lots of children
2) processes with a long parent chain
even if the uid is root (or in group wheel, or ....)

This would make it more difficult for a rampant daemon to use
the last slots (but not a deliberate fork bomb running as root).

	David

-- 
David Laight: david@l8s.co.uk