Page MenuHomeFreeBSD
Differential D55041

login: install per-UID setrlimit(2) limits on login
Needs RevisionPublic
Actions

Authored by bnovkov on Feb 1 2026, 5:22 PM.
Tags
None
Referenced Files
Unknown Object (File)
Fri, Oct 2, 1:49 PM
Unknown Object (File)
Thu, Oct 1, 10:40 PM
Unknown Object (File)
Sat, Sep 26, 8:38 PM
Unknown Object (File)
Fri, Sep 25, 4:36 PM
Unknown Object (File)
Fri, Sep 25, 5:01 AM
Unknown Object (File)
Fri, Sep 25, 5:00 AM
Unknown Object (File)
Thu, Sep 24, 11:44 AM
Unknown Object (File)
Tue, Sep 22, 8:43 PM
View All 84 Files
Subscribers
andrew_tao173.riddles.org.uk
des
imp

Details

Reviewers
markj
olce
des
Summary

This change uses setrlimit_uid(2) to install per-UID resource
limits specified in the login class capability database.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 70324
Build 67207: arc lint + arc unit

Event Timeline

bnovkov created this revision.Feb 1 2026, 5:22 PM
Herald added a subscriber: imp. · View Herald TranscriptFeb 1 2026, 5:22 PM
bnovkov requested review of this revision.Feb 1 2026, 5:22 PM
Herald added a subscriber: andrew_tao173.riddles.org.uk. · View Herald TranscriptFeb 1 2026, 5:22 PM
Harbormaster completed remote builds in B70324: Diff 170948.Feb 1 2026, 5:22 PM
bnovkov added a parent revision: D55040: lib{c,sys}: Expose setrlimit_uid(2) as an interposed syscall.Feb 1 2026, 5:22 PM
des requested changes to this revision.May 16 2026, 4:33 PM
des added a subscriber: des.
des added inline comments.
usr.bin/login/login.c
619

setusercontext(3) calls setclassresources(3) which sets the resource limits according to login.conf(5).

This revision now requires changes to proceed.May 16 2026, 4:33 PM
des added a comment.May 16 2026, 4:41 PM

D57031 updates setclassresources() to also handle RLIMIT_VMM. IMO it is the kernel's responsibility to figure out whether a given limit is per-UID or per-process-tree, cf. D55038.

Revision Contents
Changeset List

PathSize
usr.bin/
login/
27 lines

Diff 170948

View Options

usr.bin/login/login.c

Loading...