Re: [patch] RLIMIT_NPROC not enforced for root user, irrespective capabilities

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi Robert,

On 7/28/22 09:47, Schneider, Robert wrote:
Hi Alex,

sorry for the patch issue. I'm stuck here with Outlook for the time being, but let me give it another shot. I'll also attach it as a file.

Yeah, just burn Outlook, it useless :)

I could apply it from the attachment:
<https://git.kernel.org/pub/scm/docs/man-pages/man-pages.git/commit/?id=5fa2ecb53656c9fdcbd5a21972906e3da33cb504>

BTW, we use a prefix with the filename being modified (see the link).

Thanks,

Alex



 From db1e7060a5db45a6f8678ea001733518288fa518 Mon Sep 17 00:00:00 2001
From: Robert Schneider <robert.schneider03@xxxxxxx>
Date: Thu, 28 Jul 2022 07:40:56 +0000
Subject: [PATCH] RLIMIT_NPROC also ignored for ruid 0

---
  man2/getrlimit.2 | 3 ++-
  1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/man2/getrlimit.2 b/man2/getrlimit.2
index 373622077..26ba7d68c 100644
--- a/man2/getrlimit.2
+++ b/man2/getrlimit.2
@@ -342,7 +342,8 @@ limit is not enforced for processes that have either the
  .B CAP_SYS_ADMIN
  or the
  .B CAP_SYS_RESOURCE
-capability.
+capability,
+or run with real user ID 0.
  .TP
  .B RLIMIT_RSS
  This is a limit (in bytes) on the process's resident set

--
Alejandro Colomar
<http://www.alejandro-colomar.es/>

Attachment: OpenPGP_signature
Description: OpenPGP digital signature


[Index of Archives]     [Kernel Documentation]     [Netdev]     [Linux Ethernet Bridging]     [Linux Wireless]     [Kernel Newbies]     [Security]     [Linux for Hams]     [Netfilter]     [Bugtraq]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux RAID]     [Linux Admin]     [Samba]

  Powered by Linux