resource limits; RLIMIT_* macro