search for: rlim_max

..."# /etc/security/limits.conf\n#\n#E"..., 4096) = 2508 11860 read(9, "", 4096) = 0 11860 close(9) = 0 11860 munmap(0x126000, 4096) = 0 11860 setreuid(1000, 4294967295) = 0 11860 setrlimit(RLIMIT_CPU, {rlim_cur=2147483647, rlim_max=2147483647}) = 0 11860 setrlimit(RLIMIT_FSIZE, {rlim_cur=2147483647, rlim_max=2147483647}) = 0 11860 setrlimit(RLIMIT_DATA, {rlim_cur=2147483647, rlim_max=2147483647}) = 0 11860 setrlimit(RLIMIT_STACK, {rlim_cur=2147483647, rlim_max=2147483647}) = 0 11860 setrlimit(RLIMIT_CORE, {rlim_cur=50000*1024...

Hi, we're in the process of setting up large-page support on IBM regattas, but for large-page support the users have to have a set of extra capabilities (CAP_BYPASS_RAC_VMM,CAP_PROPAGATE). This are configured on a per user basis by listing which capability each user have in /etc/security/user. Unfortunately they don't get set when the users log in via OpenSSH (3.1p1). Does anybody know

...===== RCS file: /var/cvs/openssh/sandbox-rlimit.c,v retrieving revision 1.2 diff -u -p -r1.2 sandbox-rlimit.c --- sandbox-rlimit.c 23 Jun 2011 09:45:51 -0000 1.2 +++ sandbox-rlimit.c 2 Jul 2012 15:17:56 -0000 @@ -64,9 +64,11 @@ ssh_sandbox_child(struct ssh_sandbox *bo rl_zero.rlim_cur = rl_zero.rlim_max = 0; +#ifndef SANDBOX_SKIP_RLIMIT_FSIZE if (setrlimit(RLIMIT_FSIZE, &rl_zero) == -1) fatal("%s: setrlimit(RLIMIT_FSIZE, { 0, 0 }): %s", __func__, strerror(errno)); +#endif if (setrlimit(RLIMIT_NOFILE, &rl_zero) == -1) fatal("%s: setrlimit(RLIMIT_NOFILE, { 0, 0...

...;unfinished ...> --- SIGRTMIN (Unknown signal 32) @ 0 (0) --- <... rt_sigsuspend resumed> ) = -1 EINTR (Interrupted system call) sigreturn() = ? (mask now [RTMIN]) waitpid(21423, NULL, __WCLONE) = 21423 close(4) = 0 close(3) = 0 getpid() = 21422 getrlimit(RLIMIT_STACK, {rlim_cur=2044*1024, rlim_max=RLIM_INFINITY}) = 0 setrlimit(RLIMIT_STACK, {rlim_cur=RLIM_INFINITY, rlim_max=RLIM_INFINITY}) = 0 rt_sigaction(SIGRTMIN, {SIG_DFL}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {SIG_DFL}, NULL, 8) = 0 rt_sigaction(SIGRT_2, {SIG_DFL}, NULL, 8) = 0 execve("/usr/local/bin/wine-preloader", ["/us...

Hi. New (2.1.1p1) login code is nicer on AIX (4.2.1.0.06). Thanks. A couple of issues, though, which I haven't really dug into yet. I'm wondering if anyone else has seen them? If not, I'll investigate & report. 1. If I set "UseLogin" to "yes", everything seems fine except that the authentication agent forwarding doesn't work. The "SSH"

...= 32326 stat("/tmp/smbw.syo6J5", 0xbfffe6dc) = -1 ENOENT (No such file or directory) open("/tmp/smbw.syo6J5", O_RDWR|O_CREAT|O_TRUNC|O_EXCL|0x8000, 0) = 5 unlink("/tmp/smbw.syo6J5") = 0 getrlimit(RLIMIT_NOFILE, {rlim_cur=1024, rlim_max=1024}) = 0 setrlimit(RLIMIT_NOFILE, {rlim_cur=1024, rlim_max=1024}) = 0 getrlimit(RLIMIT_NOFILE, {rlim_cur=1024, rlim_max=1024}) = 0 dup2(5, 1024) = -1 EBADF (Bad file descriptor) dup2(5, 1023) = 1023 close(5) = 0 br...

...bust_list(0xb7dc5b10, 0xc) = 0 > rt_sigaction(SIGRTMIN, {0xb7ef66d0, [], SA_SIGINFO}, NULL, 8) = 0 > rt_sigaction(SIGRT_1, {0xb7ef6750, [], SA_RESTART|SA_SIGINFO}, NULL, 8) = 0 > rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 > getrlimit(RLIMIT_STACK, {rlim_cur=8192*1024, rlim_max=RLIM_INFINITY}) = 0 > uname({sys="Linux", node="portege", ...}) = 0 > brk(0) = 0x8b2d000 > brk(0x8b4e000) = 0x8b4e000 > setrlimit(RLIMIT_CORE, {rlim_cur=RLIM_INFINITY, rlim_max=RLIM_INFINITY}) = 0 > open(&q...

...F_GETFD) = 0 [pid 13748] fcntl64(0, F_SETFD, 0) = 0 [pid 13748] fcntl64(1, F_GETFD) = 0 [pid 13748] fcntl64(1, F_SETFD, 0) = 0 [pid 13748] fcntl64(2, F_GETFD) = 0 [pid 13748] fcntl64(2, F_SETFD, 0) = 0 [pid 13748] setrlimit(RLIMIT_DATA, {rlim_cur=262144*1024, rlim_max=262144*1024}) = 0 [pid 13748] setrlimit(RLIMIT_AS, {rlim_cur=262144*1024, rlim_max=262144*1024}) = 0 [pid 13748] chdir("/tmp") = 0 [pid 13748] umask(077) = 022 [pid 13748] execve("/usr/libexec/dovecot/imap", ["imap"...], [/* 36 vars */])...

...ss-size.c-new Fri Dec 27 18:19:22 2002 @@ -32,7 +32,8 @@ void restrict_process_size(unsigned int size __attr_unused__) { -#ifdef HAVE_SETRLIMIT +#if defined(HAVE_SETRLIMIT) && defined(RLIMIT_AS) +/* FreeBSD has setrlimit(2) but does not define RLIMIT_AS */ struct rlimit rlim; rlim.rlim_max = rlim.rlim_cur = Thanks, -- Dominic <dom at cus.org.uk> <d.marks at student.umist.ac.uk>

Hello there, we are running samba-2.2.5 under AIX4.3.3 (IBM silver node). As we tried to run the perl module Filesys::SmbClient we found the following problem in samba-2.2.5/source/libsmb/libsmbclient.c : AIX returns for "rlp.rlim_max" (file handler) the largest unsigned integer. Inside the function smbc_init the variable "smbc_start_fd" is calculated by adding a "guard space" (10'000), which returns a negative value. Please find enclose a patch for AIX. Greeting, Benjamin Fehrensen (See attached...

...e case I tested it was the Red Hat Linux passwd-0.50-7 program without shadowing. #include <stdio.h> #include <sys/time.h> #include <stdlib.h> #include <unistd.h> #include <sys/resource.h> main () { struct rlimit rl, *rlp; rlp=&rl; rlp->rlim_cur=4000 ; rlp->rlim_max=4000 ; setrlimit(RLIMIT_FSIZE, rlp); execl("/usr/bin/passwd", "passwd", (char *) 0); } The resource being restricted is filesize, and if the passwd file is large enough it cannot be written back and the passwd program dies. This leaves the passwd file locked against further pas...

...bust_list(0x76f86070, 0xc) = 0 rt_sigaction(SIGRTMIN, {0x76f568e8, [], SA_SIGINFO|0x4000000}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {0x76f56794, [], SA_RESTART|SA_SIGINFO|0x4000000}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 getrlimit(RLIMIT_STACK, {rlim_cur=8192*1024, rlim_max=RLIM_INFINITY}) = 0 ioctl(0, SNDCTL_TMR_TIMEBASE or TCGETS, {B115200 opost isig icanon echo ...}) = 0 ioctl(1, SNDCTL_TMR_TIMEBASE or TCGETS, {B115200 opost isig icanon echo ...}) = 0 write(1, "Network UPS Tools - UPS driver c"..., 51Network UPS Tools - UPS driver controller 1.01-900 ) =...

...t; [pid 24795] getrlimit(0x2, 0xbf8e4258 <unfinished ...> [pid 24794] <... fcntl64 resumed> ) = 0 [pid 24795] <... getrlimit resumed> ) = 0 [pid 24794] write(14, "VERSION\t1\t0\n", 12 <unfinished ...> [pid 24795] setrlimit(RLIMIT_DATA, {rlim_cur=262144*1024, rlim_max=262144*1024} <unfinished ...> [pid 24794] <... write resumed> ) = 12 [pid 24795] <... setrlimit resumed> ) = 0 [pid 24794] close(15 <unfinished ...> [pid 24795] setrlimit(RLIMIT_AS, {rlim_cur=262144*1024, rlim_max=262144*1024} <unfinished ...> [pid 24794] <...

...action(SIGRTMIN, {0x7ff03dd0dad0, [], SA_RESTORER|SA_SIGINFO, 0x7ff03dd17030}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {0x7ff03dd0db60, [], SA_RESTORER|SA_RESTART|SA_SIGINFO, 0x7ff03dd17030}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 getrlimit(RLIMIT_STACK, {rlim_cur=8192*1024, rlim_max=RLIM_INFINITY}) = 0 getuid() = 1000 brk(0) = 0x1eb8000 brk(0x1ee1000) = 0x1ee1000 uname({sys="Linux", node="pathi", ...}) = 0 rt_sigaction(SIGPIPE, {SIG_IGN, [], SA_RESTORER|SA_RESTART, 0x7f...

https://bugzilla.mindrot.org/show_bug.cgi?id=3639 Bug ID: 3639 Summary: server thread aborts during client login after receiving SSH2_MSG_KEXINIT Product: Portable OpenSSH Version: 9.2p1 Hardware: ARM OS: Linux Status: NEW Severity: critical Priority: P5 Component:

...= 0 setuid32(0) = -1 EPERM (Operation not permitted) getgid32() = 97 getegid32() = 97 setgid32(0) = -1 EPERM (Operation not permitted) setrlimit(RLIMIT_NPROC, {rlim_cur=1, rlim_max=1}) = 0 gettimeofday({1101483703, 638988}, {4294967236, 0}) = 0 rt_sigaction(SIGHUP, {0x8056320, [], 0}, NULL, 8) = 0 rt_sigaction(SIGINT, {0x8056330, [INT], SA_RESTART}, {SIG_DFL}, 8) = 0 rt_sigaction(SIGTERM, {0x8056330, [TERM], SA_RESTART}, {SIG_DFL}, 8) = 0 rt_sigaction(SIGPIPE, {SIG_IGN}, {SIG...

...,6 +546,23 @@ run_command (struct command *cmd, bool get_stdin_fd, bool get_stdout_fd, _exit (EXIT_FAILURE); } +#ifdef HAVE_SETRLIMIT + for (child_rlimit = cmd->child_rlimits; + child_rlimit != NULL; + child_rlimit = child_rlimit->next) { + rlimit.rlim_cur = rlimit.rlim_max = child_rlimit->limit; + if (setrlimit (child_rlimit->resource, &rlimit) == -1) { + /* EPERM means we're trying to raise the limit (ie. the limit is + * already more restrictive than what we want), so ignore it. + */ + if (errno != EPERM) { + perror (&q...

...\0\0\0\1\1G\0\22attributes-charset\0\niso-8859-1H\0\33attributes-natural-language\0\5en-usE\0\vprinter-uri\0\31ipp:///printers/5000-001BB\0\24requested-attributes\0\fprinter-nameB\0\0\0\fprinter-infoB\0\0\0\20printer-location\3", 196, 0) = 196 15:47:40 getrlimit(RLIMIT_NOFILE, {rlim_cur=10020, rlim_max=10020}) = 0 15:47:40 select(28, [27], NULL, NULL, {1, 0}) = 1 (in [27], left {1, 0}) 15:47:40 recv(27, "HTTP/1.1 100 Continue\r\n\r\n", 2048, 0) = 25 15:47:40 time(NULL) = 1197643660 15:47:40 time(NULL) = 1197643660 15:47:40 recv(27, "HTTP/1.1...

...= 0 set_tid_address(0x402ff708) = 21587 rt_sigaction(SIGRTMIN, {0x4003a760, [], SA_SIGINFO}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {0x4003a3a0, [], SA_RESTART|SA_SIGINFO}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 getrlimit(RLIMIT_STACK, {rlim_cur=RLIM_INFINITY, rlim_max=RLIM_INFINITY}) = 0 _sysctl({{CTL_KERN, KERN_VERSION}, 2, 0xbffff17c, 31, (nil), 0}) = 0 brk(0) = 0x812c000 brk(0x814d000) = 0x814d000 uname({sysname="Linux", nodename="hermes", release="2.6.11.4-21.9-default",...

...t_sigaction(SIGRTMIN, {0x3e73a053c0, [], SA_RESTORER|SA_SIGINFO, 0x3e73a0eca0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {0x3e73a052f0, [], SA_RESTORER|SA_RESTART|SA_SIGINFO, 0x3e73a0eca0}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 getrlimit(RLIMIT_STACK, {rlim_cur=10240*1024, rlim_max=RLIM_INFINITY}) = 0 brk(0) = 0x4ad2000 brk(0x4af3000) = 0x4af3000 epoll_create(64) = 3 writev(2, [{"ldbsearch", 9}, {": ", 2}, {"symbol lookup error", 19}, {": ", 2}, {"/us...