similar to: RLIMIT_AS patch for FreeBSD

Any user with shell access, or with access to upload a cgi script can exploit this to make machine thrash badly. Seems to circumvent any limits in the kernel Here are my settings dlai@whale.home.org:/home/dlai?limit cputime unlimited filesize 20000 kbytes datasize 8192 kbytes stacksize 8192 kbytes coredumpsize 1000000 kbytes memoryuse 8192 kbytes descriptors

Hi! I wrote a small patch to enable /etc/limits support in openssh. nice thing when you don't have PAM installed.. It is based on Ultor's openssh 1.x patch (http://marc.theaimsgroup.com/?l=secure-shell&m=96427677022741&w=2) Works fine on slackware7.1. define USE_ETC_LIMITS in config.h , and compile as usual. Sagi -------------- next part -------------- diff -N -u

Hi Aaron, On Sun, 2007-02-18 at 20:43 +0000, Aaron Gray wrote: > Hi Reid, > > Cygwin 'sys/resource.h' has get/setrlimit() functions support for > RLIMIT_DATA and RLIMIT_AS but not RLIMIT_RSS. Then, please fix it to not use RLIMIT_RSS in the cygwin case. Perhaps you should just use RLIMIT_AS for cygwin. It will trigger sooner than RLIMIT_RSS but that's probably okay.

After fuzzing 'qemu-img info' I found that certain files can cause the command to use lots of memory and time. Modify the command mini-library to allow us to place resource limits on subprocesses, and use these to limit the amount of space and time used by 'qemu-img info'. --- configure.ac | 3 +++ src/command.c | 53

Hi Reid, Cygwin 'sys/resource.h' has get/setrlimit() functions support for RLIMIT_DATA and RLIMIT_AS but not RLIMIT_RSS. Aaron ----- Original Message ----- From: "Reid Spencer" <rspencer at reidspencer.com> To: "LLVM Developers Mailing List" <llvmdev at cs.uiuc.edu> Sent: Sunday, February 18, 2007 8:32 PM Subject: Re: [LLVMdev] LLVM Cygwin build

Okay I have put a #ifdef HAVE_RLIMIT_RSS round the RSS code. There needs to be logic added to config system to complement this. Or shall I just use an #ifdef _CYGWIN_ ? Regarding the Bytecode writer stuff. I will try adding some inline dis-ambiguator functions. Aaron ----- Original Message ----- From: "Reid Spencer" <rspencer at reidspencer.com> To: "LLVM Developers

On Sun, 2002-12-01 at 22:54, Kyle Symonds wrote: > Just thought I'd pass this along. While trying to compile 0.99.4 the following happens: > > restrict-process-size.c: In function `restrict_process_size': > restrict-process-size.c:41: `RLIMIT_AS' undeclared (first use in this function) > restrict-process-size.c:41: (Each undeclared identifier is reported only once >

Hi Aaaron, On Sun, 2007-02-18 at 19:50 +0000, Aaron Gray wrote: > In order to get Cygwin working there is a need to add a > HAVE_RLIMIT_RSS and associated logic. This was just recently added. Does cygwin even have getrlimit and setrlimit? IIRC correctly, it doesn't. So, perhaps these functions need to be written differently for Cygwin. What's the equivalent win32 call? If cygwin

This trivial patch enables LLVM to build on NetBSD. Neil. Index: Program.inc =================================================================== RCS file: /var/cvs/llvm/llvm/lib/System/Unix/Program.inc,v retrieving revision 1.24 diff -u -p -r1.24 Program.inc --- Program.inc 23 Apr 2007 07:22:51 -0000 1.24 +++ Program.inc 4 Jun 2007 13:05:22 -0000 @@ -125,11 +125,13 @@ static void SetMemoryLimits

This is almost just refactoring, but I also set the memory limit to really 1 GB, and not 1×10⁹. --- src/info.c | 27 +++++++++++++++------------ 1 file changed, 15 insertions(+), 12 deletions(-) diff --git a/src/info.c b/src/info.c index d7f45f0..616ef50 100644 --- a/src/info.c +++ b/src/info.c @@ -56,6 +56,7 @@ static yajl_val get_json_output (guestfs_h *g, const char *filename); static char

Thanks: Dan Berrangé for identifying the problem. --- .gitignore | 1 + src/command.c | 11 +++++++ tests/regressions/Makefile.am | 13 +++++++- tests/regressions/test-big-heap.c | 69 +++++++++++++++++++++++++++++++++++++++ 4 files changed, 93 insertions(+), 1 deletion(-) create mode 100644 tests/regressions/test-big-heap.c diff --git

The attached patch should solve the following problem: ssh-agent creates a temporary directory under /tmp with '600' permissions. The actual socket file is created in that dir using the default umask. That's no problem in U*X systems since nobody but the owner of the directory can read the socket file. Unfortunately, Windows has a user privilege called "Bypass traverse

Package: src:xcp-vncterm Version: 0.1-2 Severity: important Tags: sid jessie User: debian-glibc at lists.debian.org Usertags: ftbfs-glibc-2.17 The package fails to build in a test rebuild on at least amd64 with eglibc-2.17, but succeeds to build with eglibc-2.13. The severity of this report may be raised before the jessie release. The test rebuild was done together with GCC-4.8, so some issues

http://bugzilla.mindrot.org/show_bug.cgi?id=301 Summary: In openssh 3.3 and 3.4 pam session seems be called from non-root Product: Portable OpenSSH Version: -current Platform: All OS/Version: Linux Status: NEW Severity: critical Priority: P3 Component: sshd AssignedTo:

I fixed the issue with Dovecot not starting on macOS Ventura by adding this to 10-master.conf: service log { vsz_limit = 0 } But now when I try to login via Imap on port 143 I get the same error for imap-login: Feb 20 15:55:41 imap-login: Error: Feb 20 15:55:41 service(imap-login): Fatal: setrlimit(RLIMIT_DATA, 268435456): Invalid argument Feb 20 15:55:41 imap-login: Fatal: master:

On Sun, 2007-02-18 at 21:42 +0000, Aaron Gray wrote: > Okay I have put a #ifdef HAVE_RLIMIT_RSS round the RSS code. > > There needs to be logic added to config system to complement this. > > Or shall I just use an #ifdef _CYGWIN_ ? Please just use #ifdef _CYGWIN_ > > Regarding the Bytecode writer stuff. I will try adding some inline > dis-ambiguator functions. Yeah,

Hi, this happens since a few days on a Gentoo hardened system using a grsecurity enabled kernel running Dovecot 1.0.10, only to 2 of 10 users though: --8<-- kernel: grsec: From 192.168.0.1: denied resource overstep by \ requesting 537325568 for RLIMIT_AS against limit 536870912 \ for /usr/libexec/dovecot/imap[imap:15708] uid/euid:30010/30010 \ gid/egid:30006/30006, parent

On 05/05/2016 10:11, Uwe Ligges wrote: > Actually this also happens under Linux and I had my R processes killed > more than once (and much worse also other processes so that we had to > reboot a server, essentially). I found that setting RLIMIT_AS [1] works very well on Linux. But this requires that you cap memory to some fixed value. > library(RAppArmor) > rlimit_as(1e9) >

Hi I've just compiled dovecot under Slitaz, but I can't get it to run... It always die with this message in log : 2010-05-06 12:35:12 dovecot: Info: Dovecot v1.2.11 starting up 2010-05-06 12:35:12 dovecot: Fatal: setrlimit(RLIMIT_DATA, 256): Operation not permitted 2010-05-06 12:35:12 dovecot: Error: child 1455 (auth) returned error 89 (Fatal failure) 2010-05-06 12:35:12 dovecot: Fatal:

I have an ibook G4 (powerpc) running OS X panther. I am using gcc 4.0.3 installed from Darwin Ports to compile llvm. When I try to compile llvm, I get the following error: llvm[1]: Compiling Program.cpp for Debug build Unix/Program.inc: In function 'void llvm::SetMemoryLimits(unsigned int)': Unix/Program.inc:127: error: 'RLIMIT_AS' was not declared in this scope Does anyone