Checking the rlimit value specified in init_user_ns from the created userns does not work properly. The issue is that the maximum value is taken by the same rules as for ucounts. Because of this, we check the current rlimit counter value with RLIM_INFINITY in init_user_ns. -- Alexey Gladkov (2): ucounts: Fix rlimit max values check ucounts: Move rlimit max values from ucounts max include/linux/user_namespace.h | 13 ++++++++++--- kernel/fork.c | 8 ++++---- kernel/ucount.c | 15 +++++++++------ kernel/user_namespace.c | 8 ++++---- 4 files changed, 27 insertions(+), 17 deletions(-) -- 2.33.0
