Page MenuHomeFreeBSD
Differential D55041

login: install per-UID setrlimit(2) limits on login
Needs RevisionPublic
Actions

Authored by bnovkov on Feb 1 2026, 5:22 PM.
Tags
None
Referenced Files
Unknown Object (File)
Wed, Aug 12, 11:40 PM
Unknown Object (File)
Wed, Aug 12, 11:30 PM
Unknown Object (File)
Mon, Aug 10, 12:12 PM
Unknown Object (File)
Mon, Aug 10, 10:59 AM
Unknown Object (File)
Sat, Aug 8, 5:34 AM
Unknown Object (File)
Sat, Aug 8, 4:55 AM
Unknown Object (File)
Mon, Aug 3, 5:40 PM
Unknown Object (File)
Mon, Aug 3, 8:36 AM
View All 44 Files
Subscribers
andrew_tao173.riddles.org.uk
des
imp

Details

Reviewers
markj
olce
des
Summary

This change uses setrlimit_uid(2) to install per-UID resource
limits specified in the login class capability database.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 70324
Build 67207: arc lint + arc unit

Event Timeline

bnovkov created this revision.Feb 1 2026, 5:22 PM
Herald added a subscriber: imp. · View Herald TranscriptFeb 1 2026, 5:22 PM
bnovkov requested review of this revision.Feb 1 2026, 5:22 PM
Herald added a subscriber: andrew_tao173.riddles.org.uk. · View Herald TranscriptFeb 1 2026, 5:22 PM
Harbormaster completed remote builds in B70324: Diff 170948.Feb 1 2026, 5:22 PM
bnovkov added a parent revision: D55040: lib{c,sys}: Expose setrlimit_uid(2) as an interposed syscall.Feb 1 2026, 5:22 PM
des requested changes to this revision.May 16 2026, 4:33 PM
des added a subscriber: des.
des added inline comments.
usr.bin/login/login.c
619

setusercontext(3) calls setclassresources(3) which sets the resource limits according to login.conf(5).

This revision now requires changes to proceed.May 16 2026, 4:33 PM
des added a comment.May 16 2026, 4:41 PM

D57031 updates setclassresources() to also handle RLIMIT_VMM. IMO it is the kernel's responsibility to figure out whether a given limit is per-UID or per-process-tree, cf. D55038.

Revision Contents
Changeset List

PathSize
usr.bin/
login/
27 lines

Diff 170948

View Options

usr.bin/login/login.c

Loading...