search for: setrlimit

Hi all. I have an old windows VM with an oldish cygwin that I use for the regression tests. Investigating one of the test failures, I see that it's for UsePrivilegeSeparation=sandbox, and it seems to be because setrlimit(RLIMIT_FSIZE, ...) is not supported. IMO, this isn't a big loss, since the most useful thing in the rlimit "sandbox" is the descriptor limits. Can anyone see a reason not to just omit RLIMIT_FSIZE on cygwin? It's a no-op unless you've explicitly set "UsePrivilegeSepara...

..._ANONYMOUS, -1, 0) = 0x126000 11860 read(9, "# /etc/security/limits.conf\n#\n#E"..., 4096) = 2508 11860 read(9, "", 4096) = 0 11860 close(9) = 0 11860 munmap(0x126000, 4096) = 0 11860 setreuid(1000, 4294967295) = 0 11860 setrlimit(RLIMIT_CPU, {rlim_cur=2147483647, rlim_max=2147483647}) = 0 11860 setrlimit(RLIMIT_FSIZE, {rlim_cur=2147483647, rlim_max=2147483647}) = 0 11860 setrlimit(RLIMIT_DATA, {rlim_cur=2147483647, rlim_max=2147483647}) = 0 11860 setrlimit(RLIMIT_STACK, {rlim_cur=2147483647, rlim_max=2147483647}) = 0 11860...

I fixed the issue with Dovecot not starting on macOS Ventura by adding this to 10-master.conf: service log { vsz_limit = 0 } But now when I try to login via Imap on port 143 I get the same error for imap-login: Feb 20 15:55:41 imap-login: Error: Feb 20 15:55:41 service(imap-login): Fatal: setrlimit(RLIMIT_DATA, 268435456): Invalid argument Feb 20 15:55:41 imap-login: Fatal: master: service(imap-login): child 11781 returned error 89 (Fatal failure) Feb 20 15:55:41 master: Error: service(imap-login): command startup failed, throttling for 60.000 secs Feb 20 16:13:04 imap-login: Error: Feb 20 16...

Hi Evgeniy, This fix causes me trouble in the emulator because of the execv(argv[0]): http://lists.cs.uiuc.edu/pipermail/llvm-commits/Week-of-Mon-20140217/205359.html Instead using setrlimit from within the C++ code, can you set the stack limit using ulimit on the RUN lines? Also, should this test be moved to the Posix or Linux directory? Thanks, Greg

...PM, Greg Fitzgerald <garious at gmail.com> wrote: >> Hi Evgeniy, >> >> This fix causes me trouble in the emulator because of the execv(argv[0]): >> >> http://lists.cs.uiuc.edu/pipermail/llvm-commits/Week-of-Mon-20140217/205359.html >> >> Instead using setrlimit from within the C++ code, can you set the >> stack limit using ulimit on the RUN lines? Also, should this test be >> moved to the Posix or Linux directory? >> >> Thanks, >> Greg

> Why does fork-exec for llvm-symbolizer work, but simple exec(self) does not? Because the llvm-symbolizer the runtime finds is built for the host architecture. This is weird, yes, but once we integrate the symbolizer, it goes away. > Could we write a ulimit-like utility that would do setrlimit and then > exec the specified binary > %run %ulimit -s 8192 %t? I like that idea. How do you feel about this short-term solution: %run sh -c "ulimit -s 8192 && %t" -Greg On Thu, May 29, 2014 at 12:05 PM, Evgeniy Stepanov <eugenis at google.com> wrote: > On...

Hi I've just compiled dovecot under Slitaz, but I can't get it to run... It always die with this message in log : 2010-05-06 12:35:12 dovecot: Info: Dovecot v1.2.11 starting up 2010-05-06 12:35:12 dovecot: Fatal: setrlimit(RLIMIT_DATA, 256): Operation not permitted 2010-05-06 12:35:12 dovecot: Error: child 1455 (auth) returned error 89 (Fatal failure) 2010-05-06 12:35:12 dovecot: Fatal: Auth process died too early - shutting down here is my "dovecot -n" : # 1.2.11: /etc/dovecot/dovecot.conf # OS: Linux 2....

Hey, I've just updated the FreeBSD dovecot port to the 0.99.4 beta release, the following patch was needed as FreeBSD has setrlimit(2) but does not define RLIMIT_AS (I believe). I switched the code the require both, alternatively find a parallel option in the FreeBSD setrlimit(2) manual page. ( http://www.freebsd.org/cgi/man.cgi?setrlimit ) You may be interested in integrating this patch. --- src/lib/restrict-process-size.c F...

Hi Aaaron, On Sun, 2007-02-18 at 19:50 +0000, Aaron Gray wrote: > In order to get Cygwin working there is a need to add a > HAVE_RLIMIT_RSS and associated logic. This was just recently added. Does cygwin even have getrlimit and setrlimit? IIRC correctly, it doesn't. So, perhaps these functions need to be written differently for Cygwin. What's the equivalent win32 call? If cygwin does have getrlimit/setrlimit then we'll have to figure out what RLIMIT_RSS should be under cygwin. Is there the notion of running set size u...

Hi Aaron, On Sun, 2007-02-18 at 20:43 +0000, Aaron Gray wrote: > Hi Reid, > > Cygwin 'sys/resource.h' has get/setrlimit() functions support for > RLIMIT_DATA and RLIMIT_AS but not RLIMIT_RSS. Then, please fix it to not use RLIMIT_RSS in the cygwin case. Perhaps you should just use RLIMIT_AS for cygwin. It will trigger sooner than RLIMIT_RSS but that's probably okay. Reid. > > Aaron > > -----...

Hi Reid, Cygwin 'sys/resource.h' has get/setrlimit() functions support for RLIMIT_DATA and RLIMIT_AS but not RLIMIT_RSS. Aaron ----- Original Message ----- From: "Reid Spencer" <rspencer at reidspencer.com> To: "LLVM Developers Mailing List" <llvmdev at cs.uiuc.edu> Sent: Sunday, February 18, 2007 8:32 PM Subject...

...: --cut-here-- --- config.h.in.orig Thu Jun 7 14:18:57 2001 +++ config.h.in Thu Jun 7 14:19:33 2001 @@ -503,6 +503,9 @@ /* Define if you have the setreuid function. */ #undef HAVE_SETREUID +/* Define if you have the setresuid function. */ +#undef HAVE_SETRESUID + /* Define if you have the setrlimit function. */ #undef HAVE_SETRLIMIT --- configure.orig Thu Jun 7 14:12:53 2001 +++ configure Thu Jun 7 14:13:40 2001 @@ -3184,7 +3184,7 @@ fi -for ac_func in arc4random atexit b64_ntop bcopy bindresvport_sa clock fchown fchmod freeaddrinfo futimes gai_strerror getcwd getaddrinfo getgroupl...

...header_sandbox_h" = "xyes") ; then + SANDBOX_STYLE="darwin" + AC_DEFINE([SANDBOX_DARWIN], [1], [Sandbox using Darwin sandbox_init(3)]) elif test "x$sandbox_arg" = "xrlimit" || \ ( test -z "$sandbox_arg" && test "x$ac_cv_func_setrlimit" = "xyes" ) ; then SANDBOX_STYLE="rlimit" Index: sandbox-darwin.c =================================================================== RCS file: sandbox-darwin.c diff -N sandbox-darwin.c --- /dev/null 1 Jan 1970 00:00:00 -0000 +++ sandbox-darwin.c 23 Jun 2011 10:41:08 -000...

Hi, the attached patch is relative to the current CVS content. It's needed to build and compile cleanly under Cygwin. The problem are the functions setrlimit/getrlimit. I have added checks for getrlimit, sysconf and setdtablesize to configure.in and appropriate checks in the source code. Corinna -- Corinna Vinschen Cygwin Developer Red Hat, Inc. mailto:vinschen at redhat.com -------------- next part -------------- An embedded and charset-unspecified...

...====== RCS file: /var/cvs/llvm/llvm/lib/System/Unix/Program.inc,v retrieving revision 1.24 diff -u -p -r1.24 Program.inc --- Program.inc 23 Apr 2007 07:22:51 -0000 1.24 +++ Program.inc 4 Jun 2007 13:05:22 -0000 @@ -125,11 +125,13 @@ static void SetMemoryLimits (unsigned si r.rlim_cur = limit; setrlimit (RLIMIT_RSS, &r); #endif +#ifdef RLIMIT_AS // e.g. NetBSD doesn't have it. // Virtual memory. getrlimit (RLIMIT_AS, &r); r.rlim_cur = limit; setrlimit (RLIMIT_AS, &r); #endif +#endif } int

...lt;llvmdev at cs.uiuc.edu> Sent: Sunday, February 18, 2007 9:08 PM Subject: Re: [LLVMdev] LLVM Cygwin build RLIMIT_RSS configuration problem > Hi Aaron, > > On Sun, 2007-02-18 at 20:43 +0000, Aaron Gray wrote: >> Hi Reid, >> >> Cygwin 'sys/resource.h' has get/setrlimit() functions support for >> RLIMIT_DATA and RLIMIT_AS but not RLIMIT_RSS. > > Then, please fix it to not use RLIMIT_RSS in the cygwin case. Perhaps > you should just use RLIMIT_AS for cygwin. It will trigger sooner than > RLIMIT_RSS but that's probably okay. > > Reid. &gt...

...000 dev:324,0 ino:2042076 uid:0 gid:0 size:0 O_RDWR|O_NONBLOCK FD_CLOEXEC 459: S_IFIFO mode:0000 dev:324,0 ino:1311426 uid:0 gid:0 size:0 O_RDWR|O_NONBLOCK FD_CLOEXEC Perhaps the Dovecot master process should raise it's own limit to the allowed maximum when it starts? (getrlimit()+setrlimit()), or be user configurable? Has this been discussed somewhere before? - Peter -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 185 bytes Desc: OpenPGP digital signature URL: <http://dovecot.org/pipermail/d...

Hi Joel, We essentially have the following directory structure: /images/yyyy/mm/dd/nn For each day of the year we get in the region of 120,000 images, which are split down into 100 subdirectories to prevent their being too many files in one directory. The directory /images is shared out as follows: [images] comment = Imaging Files path = /images public = yes writable = yes

...s to limit what it can do. This approach is not new - it has been used by Chris Evans' vsftpd FTP server and, more recently, by Google's Chrome web browser. This patch includes three concrete sandbox implementations, a dummy one for platforms that support nothing else, a weak one that uses setrlimit(2) and a strong one that uses OpenBSD's systrace(4). The setrlimit(2) sandbox drops the hard and soft fd, process and "created file size" limits to zero. This effectively prevents the slave process from forking or creating new file descriptors (e.g. sockets). This works well suprisin...

...6:03:18 Error: login: fd_read() failed: Function not implemented dovecot: Dec 17 16:03:18 Error: close(mail client) failed: Bad file descriptor dovecot: Dec 17 16:03:18 Error: Login process died too early - shutting down dovecot: Dec 17 16:03:18 Error: imap-login: dovecot: Dec 17 16:03:18 Fatal: setrlimit(RLIMIT_DATA, 32): Invalid argument dovecot: Dec 17 16:03:18 Error: login: fd_read() failed: Function not implemented dovecot: Dec 17 16:03:18 Error: close(mail client) failed: Bad file descriptor dovecot: Dec 17 16:03:18 Error: imap-login: dovecot: Dec 17 16:03:18 Fatal: setrlimit(RLIMIT_DATA, 3...