Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 16 Aug 2010 13:41:08 +0200
From:      =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= <des@des.no>
To:        src-committers@freebsd.org
Cc:        svn-src-head@freebsd.org, svn-src-all@freebsd.org
Subject:   Re: svn commit: r211393 - head/lib/libutil
Message-ID:  <86mxsm4wff.fsf@ds4.des.no>
In-Reply-To: <201008161132.o7GBWKhx097183@svn.freebsd.org> (Dag-Erling Smorgrav's message of "Mon, 16 Aug 2010 11:32:20 %2B0000 (UTC)")
References:  <201008161132.o7GBWKhx097183@svn.freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help
Dag-Erling Smorgrav <des@FreeBSD.org> writes:
> Log:
>   In setusercontext(), do not apply user settings unless running as the
>   user in question (usually but not necessarily because we were called
>   with LOGIN_SETUSER).  This plugs a hole where users could raise their
>   resource limits and expand their CPU mask.

Note that this commit semi-intentionally introduces another bug: in some
cases, the user's limits will not be applied at all.  This is by far the
lesser of two evils, and is easy (albeit time-consuming) to fix.

DES
--=20
Dag-Erling Sm=C3=B8rgrav - des@des.no



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?86mxsm4wff.fsf>