search for: rlim_cur

...126000 11860 read(9, "# /etc/security/limits.conf\n#\n#E"..., 4096) = 2508 11860 read(9, "", 4096) = 0 11860 close(9) = 0 11860 munmap(0x126000, 4096) = 0 11860 setreuid(1000, 4294967295) = 0 11860 setrlimit(RLIMIT_CPU, {rlim_cur=2147483647, rlim_max=2147483647}) = 0 11860 setrlimit(RLIMIT_FSIZE, {rlim_cur=2147483647, rlim_max=2147483647}) = 0 11860 setrlimit(RLIMIT_DATA, {rlim_cur=2147483647, rlim_max=2147483647}) = 0 11860 setrlimit(RLIMIT_STACK, {rlim_cur=2147483647, rlim_max=2147483647}) = 0 11860 setrlimit(RLIMIT_CORE,...

Hi, we're in the process of setting up large-page support on IBM regattas, but for large-page support the users have to have a set of extra capabilities (CAP_BYPASS_RAC_VMM,CAP_PROPAGATE). This are configured on a per user basis by listing which capability each user have in /etc/security/user. Unfortunately they don't get set when the users log in via OpenSSH (3.1p1). Does anybody know

...uot;fd limit (ulimit -n) is lower than required " - "under max. load (%u < %u), because of %s", - (unsigned int)fd_limit, max_client_limit, - max_client_limit_source); + if (getrlimit(RLIMIT_NOFILE, &fd_limit) == 0) { +#ifdef HAVE_SETRLIMIT + rlim_t old = fd_limit.rlim_cur; + fd_limit.rlim_cur = I_MAX(old, max_client_limit); + if (setrlimit(RLIMIT_NOFILE, &fd_limit) < 0) + fd_limit.rlim_cur = old; +#endif + if (fd_limit.rlim_cur < (rlim_t)max_client_limit) + i_warning("fd limit (ulimit -n) is lower than required " + "under max. l...

...=========================== RCS file: /var/cvs/llvm/llvm/lib/System/Unix/Program.inc,v retrieving revision 1.24 diff -u -p -r1.24 Program.inc --- Program.inc 23 Apr 2007 07:22:51 -0000 1.24 +++ Program.inc 4 Jun 2007 13:05:22 -0000 @@ -125,11 +125,13 @@ static void SetMemoryLimits (unsigned si r.rlim_cur = limit; setrlimit (RLIMIT_RSS, &r); #endif +#ifdef RLIMIT_AS // e.g. NetBSD doesn't have it. // Virtual memory. getrlimit (RLIMIT_AS, &r); r.rlim_cur = limit; setrlimit (RLIMIT_AS, &r); #endif +#endif } int

...======================== RCS file: /var/cvs/openssh/sandbox-rlimit.c,v retrieving revision 1.2 diff -u -p -r1.2 sandbox-rlimit.c --- sandbox-rlimit.c 23 Jun 2011 09:45:51 -0000 1.2 +++ sandbox-rlimit.c 2 Jul 2012 15:17:56 -0000 @@ -64,9 +64,11 @@ ssh_sandbox_child(struct ssh_sandbox *bo rl_zero.rlim_cur = rl_zero.rlim_max = 0; +#ifndef SANDBOX_SKIP_RLIMIT_FSIZE if (setrlimit(RLIMIT_FSIZE, &rl_zero) == -1) fatal("%s: setrlimit(RLIMIT_FSIZE, { 0, 0 }): %s", __func__, strerror(errno)); +#endif if (setrlimit(RLIMIT_NOFILE, &rl_zero) == -1) fatal("%s: setrlimit(RL...

Any user with shell access, or with access to upload a cgi script can exploit this to make machine thrash badly. Seems to circumvent any limits in the kernel Here are my settings dlai@whale.home.org:/home/dlai?limit cputime unlimited filesize 20000 kbytes datasize 8192 kbytes stacksize 8192 kbytes coredumpsize 1000000 kbytes memoryuse 8192 kbytes descriptors

...rt_sigsuspend([] <unfinished ...> --- SIGRTMIN (Unknown signal 32) @ 0 (0) --- <... rt_sigsuspend resumed> ) = -1 EINTR (Interrupted system call) sigreturn() = ? (mask now [RTMIN]) waitpid(21423, NULL, __WCLONE) = 21423 close(4) = 0 close(3) = 0 getpid() = 21422 getrlimit(RLIMIT_STACK, {rlim_cur=2044*1024, rlim_max=RLIM_INFINITY}) = 0 setrlimit(RLIMIT_STACK, {rlim_cur=RLIM_INFINITY, rlim_max=RLIM_INFINITY}) = 0 rt_sigaction(SIGRTMIN, {SIG_DFL}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {SIG_DFL}, NULL, 8) = 0 rt_sigaction(SIGRT_2, {SIG_DFL}, NULL, 8) = 0 execve("/usr/local/bin/wine-preloade...

Hi. New (2.1.1p1) login code is nicer on AIX (4.2.1.0.06). Thanks. A couple of issues, though, which I haven't really dug into yet. I'm wondering if anyone else has seen them? If not, I'll investigate & report. 1. If I set "UseLogin" to "yes", everything seems fine except that the authentication agent forwarding doesn't work. The "SSH"

Has anyone tried LFS (ie >2G files support) and Ext3 together? Are there good reasons why this should/should not work? I see the RH enterprise kernel patch set specifically does not attempt both lfs and ext3, but the lfs patches themselves touch some reasonably localised parts of ext2, so I would hope (without having dived in there to test), that the ext3 changes would mirror that

...0 getpid() = 32326 stat("/tmp/smbw.syo6J5", 0xbfffe6dc) = -1 ENOENT (No such file or directory) open("/tmp/smbw.syo6J5", O_RDWR|O_CREAT|O_TRUNC|O_EXCL|0x8000, 0) = 5 unlink("/tmp/smbw.syo6J5") = 0 getrlimit(RLIMIT_NOFILE, {rlim_cur=1024, rlim_max=1024}) = 0 setrlimit(RLIMIT_NOFILE, {rlim_cur=1024, rlim_max=1024}) = 0 getrlimit(RLIMIT_NOFILE, {rlim_cur=1024, rlim_max=1024}) = 0 dup2(5, 1024) = -1 EBADF (Bad file descriptor) dup2(5, 1023) = 1023 close(5)...

...nd of non-void function X) patches: Index: lib/System/Unix/Program.inc =================================================================== --- lib/System/Unix/Program.inc (revision 37850) +++ lib/System/Unix/Program.inc (working copy) @@ -119,7 +119,7 @@ getrlimit (RLIMIT_DATA, &r); r.rlim_cur = limit; setrlimit (RLIMIT_DATA, &r); -#ifndef __CYGWIN__ +#ifdef RLIMIT_RSS // Resident set size. getrlimit (RLIMIT_RSS, &r); r.rlim_cur = limit; Index: lib/Support/APInt.cpp =================================================================== --- lib/Support/APInt.cpp (...

...dif #define O_CREAT 0x0200 /* create if nonexistent */ #define O_TRUNC 0x0400 /* truncate to zero length */ *** kern/LINK/kern_sig.c Sat Dec 21 10:57:24 1996 --- kern/kern_sig.c Fri Aug 27 14:38:25 1999 *************** *** 1241,1249 **** p->p_rlimit[RLIMIT_CORE].rlim_cur) return (EFAULT); sprintf(name, "%s.core", p->p_comm); ! NDINIT(&nd, LOOKUP, FOLLOW, UIO_SYSSPACE, name, p); if ((error = vn_open(&nd, ! O_CREAT | FWRITE, S_IRUSR | S_IWUSR))) return (error); vp = nd.ni_vp; --- 1241,1249 ---- p-&g...

...+ * file descriptors than just the disk files. + */ + const unsigned fd_headroom = 32; + + ret = guestfs_max_disks (g); + if (ret == -1) + return -1; + + if (getrlimit (RLIMIT_NOFILE, &rlim) == -1) { + perror ("getrlimit: RLIMIT_NOFILE"); + return -1; + } + if (rlim.rlim_cur > fd_headroom) { + if ((size_t) ret > rlim.rlim_cur - fd_headroom) { + if (rlim.rlim_max > rlim.rlim_cur) + fprintf (stderr, + "%s: warning: to get more complete testing, increase\n" + "file limit up to hard limit:\n" +...

...= 11503 > set_robust_list(0xb7dc5b10, 0xc) = 0 > rt_sigaction(SIGRTMIN, {0xb7ef66d0, [], SA_SIGINFO}, NULL, 8) = 0 > rt_sigaction(SIGRT_1, {0xb7ef6750, [], SA_RESTART|SA_SIGINFO}, NULL, 8) = 0 > rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 > getrlimit(RLIMIT_STACK, {rlim_cur=8192*1024, rlim_max=RLIM_INFINITY}) = 0 > uname({sys="Linux", node="portege", ...}) = 0 > brk(0) = 0x8b2d000 > brk(0x8b4e000) = 0x8b4e000 > setrlimit(RLIMIT_CORE, {rlim_cur=RLIM_INFINITY, rlim_max=RLIM_INFINIT...

...[pid 13748] fcntl64(0, F_GETFD) = 0 [pid 13748] fcntl64(0, F_SETFD, 0) = 0 [pid 13748] fcntl64(1, F_GETFD) = 0 [pid 13748] fcntl64(1, F_SETFD, 0) = 0 [pid 13748] fcntl64(2, F_GETFD) = 0 [pid 13748] fcntl64(2, F_SETFD, 0) = 0 [pid 13748] setrlimit(RLIMIT_DATA, {rlim_cur=262144*1024, rlim_max=262144*1024}) = 0 [pid 13748] setrlimit(RLIMIT_AS, {rlim_cur=262144*1024, rlim_max=262144*1024}) = 0 [pid 13748] chdir("/tmp") = 0 [pid 13748] umask(077) = 022 [pid 13748] execve("/usr/libexec/dovecot/imap", ["imap"....

...i Dec 27 18:19:22 2002 @@ -32,7 +32,8 @@ void restrict_process_size(unsigned int size __attr_unused__) { -#ifdef HAVE_SETRLIMIT +#if defined(HAVE_SETRLIMIT) && defined(RLIMIT_AS) +/* FreeBSD has setrlimit(2) but does not define RLIMIT_AS */ struct rlimit rlim; rlim.rlim_max = rlim.rlim_cur = Thanks, -- Dominic <dom at cus.org.uk> <d.marks at student.umist.ac.uk>

...asswd(1) program. In the case I tested it was the Red Hat Linux passwd-0.50-7 program without shadowing. #include <stdio.h> #include <sys/time.h> #include <stdlib.h> #include <unistd.h> #include <sys/resource.h> main () { struct rlimit rl, *rlp; rlp=&rl; rlp->rlim_cur=4000 ; rlp->rlim_max=4000 ; setrlimit(RLIMIT_FSIZE, rlp); execl("/usr/bin/passwd", "passwd", (char *) 0); } The resource being restricted is filesize, and if the passwd file is large enough it cannot be written back and the passwd program dies. This leaves the passwd file lo...

...= 2936 set_robust_list(0x76f86070, 0xc) = 0 rt_sigaction(SIGRTMIN, {0x76f568e8, [], SA_SIGINFO|0x4000000}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {0x76f56794, [], SA_RESTART|SA_SIGINFO|0x4000000}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 getrlimit(RLIMIT_STACK, {rlim_cur=8192*1024, rlim_max=RLIM_INFINITY}) = 0 ioctl(0, SNDCTL_TMR_TIMEBASE or TCGETS, {B115200 opost isig icanon echo ...}) = 0 ioctl(1, SNDCTL_TMR_TIMEBASE or TCGETS, {B115200 opost isig icanon echo ...}) = 0 write(1, "Network UPS Tools - UPS driver c"..., 51Network UPS Tools - UPS driver cont...

...cc <unfinished ...> [pid 24795] getrlimit(0x2, 0xbf8e4258 <unfinished ...> [pid 24794] <... fcntl64 resumed> ) = 0 [pid 24795] <... getrlimit resumed> ) = 0 [pid 24794] write(14, "VERSION\t1\t0\n", 12 <unfinished ...> [pid 24795] setrlimit(RLIMIT_DATA, {rlim_cur=262144*1024, rlim_max=262144*1024} <unfinished ...> [pid 24794] <... write resumed> ) = 12 [pid 24795] <... setrlimit resumed> ) = 0 [pid 24794] close(15 <unfinished ...> [pid 24795] setrlimit(RLIMIT_AS, {rlim_cur=262144*1024, rlim_max=262144*1024} <unfinished ....

...unavailable) rt_sigaction(SIGRTMIN, {0x7ff03dd0dad0, [], SA_RESTORER|SA_SIGINFO, 0x7ff03dd17030}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {0x7ff03dd0db60, [], SA_RESTORER|SA_RESTART|SA_SIGINFO, 0x7ff03dd17030}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 getrlimit(RLIMIT_STACK, {rlim_cur=8192*1024, rlim_max=RLIM_INFINITY}) = 0 getuid() = 1000 brk(0) = 0x1eb8000 brk(0x1ee1000) = 0x1ee1000 uname({sys="Linux", node="pathi", ...}) = 0 rt_sigaction(SIGPIPE, {SIG_IGN, [], SA_RESTO...