Page MenuHomeFreeBSD
Differential D55041

login: install per-UID setrlimit(2) limits on login
Needs RevisionPublic
Actions

Authored by bnovkov on Feb 1 2026, 5:22 PM.
Tags
None
Referenced Files
Unknown Object (File)
Mon, May 18, 10:57 PM
Unknown Object (File)
Wed, May 13, 9:40 PM
Unknown Object (File)
Wed, May 13, 8:12 PM
Unknown Object (File)
Sun, May 10, 11:48 PM
Unknown Object (File)
Tue, Apr 28, 12:06 AM
Unknown Object (File)
Apr 12 2026, 1:15 AM
Unknown Object (File)
Apr 8 2026, 5:51 AM
Unknown Object (File)
Apr 6 2026, 2:36 PM
View All 25 Files
Subscribers
andrew_tao173.riddles.org.uk
des
imp

Details

Reviewers
markj
olce
des
Summary

This change uses setrlimit_uid(2) to install per-UID resource
limits specified in the login class capability database.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 70324
Build 67207: arc lint + arc unit

Event Timeline

bnovkov created this revision.Feb 1 2026, 5:22 PM
Herald added a subscriber: imp. · View Herald TranscriptFeb 1 2026, 5:22 PM
bnovkov requested review of this revision.Feb 1 2026, 5:22 PM
Herald added a subscriber: andrew_tao173.riddles.org.uk. · View Herald TranscriptFeb 1 2026, 5:22 PM
Harbormaster completed remote builds in B70324: Diff 170948.Feb 1 2026, 5:22 PM
bnovkov added a parent revision: D55040: lib{c,sys}: Expose setrlimit_uid(2) as an interposed syscall.Feb 1 2026, 5:22 PM
des requested changes to this revision.Sat, May 16, 4:33 PM
des added a subscriber: des.
des added inline comments.
usr.bin/login/login.c
619

setusercontext(3) calls setclassresources(3) which sets the resource limits according to login.conf(5).

This revision now requires changes to proceed.Sat, May 16, 4:33 PM
des added a comment.Sat, May 16, 4:41 PM

D57031 updates setclassresources() to also handle RLIMIT_VMM. IMO it is the kernel's responsibility to figure out whether a given limit is per-UID or per-process-tree, cf. D55038.

Revision Contents
Changeset List

PathSize
usr.bin/
login/
27 lines

Diff 170948

View Options

usr.bin/login/login.c

Loading...