From owner-svn-src-head@FreeBSD.ORG Mon Aug 16 11:41:10 2010 Return-Path: Delivered-To: svn-src-head@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 548AE1065695; Mon, 16 Aug 2010 11:41:10 +0000 (UTC) (envelope-from des@des.no) Received: from smtp.des.no (smtp.des.no [194.63.250.102]) by mx1.freebsd.org (Postfix) with ESMTP id 15C778FC13; Mon, 16 Aug 2010 11:41:09 +0000 (UTC) Received: from ds4.des.no (des.no [84.49.246.2]) by smtp.des.no (Postfix) with ESMTP id 0A3931FFC33; Mon, 16 Aug 2010 11:41:09 +0000 (UTC) Received: by ds4.des.no (Postfix, from userid 1001) id C7E2584559; Mon, 16 Aug 2010 13:41:08 +0200 (CEST) From: =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= To: src-committers@freebsd.org References: <201008161132.o7GBWKhx097183@svn.freebsd.org> Date: Mon, 16 Aug 2010 13:41:08 +0200 In-Reply-To: <201008161132.o7GBWKhx097183@svn.freebsd.org> (Dag-Erling Smorgrav's message of "Mon, 16 Aug 2010 11:32:20 +0000 (UTC)") Message-ID: <86mxsm4wff.fsf@ds4.des.no> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/23.2 (berkeley-unix) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Cc: svn-src-head@freebsd.org, svn-src-all@freebsd.org Subject: Re: svn commit: r211393 - head/lib/libutil X-BeenThere: svn-src-head@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: SVN commit messages for the src tree for head/-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 16 Aug 2010 11:41:10 -0000 Dag-Erling Smorgrav writes: > Log: > In setusercontext(), do not apply user settings unless running as the > user in question (usually but not necessarily because we were called > with LOGIN_SETUSER). This plugs a hole where users could raise their > resource limits and expand their CPU mask. Note that this commit semi-intentionally introduces another bug: in some cases, the user's limits will not be applied at all. This is by far the lesser of two evils, and is easy (albeit time-consuming) to fix. DES --=20 Dag-Erling Sm=C3=B8rgrav - des@des.no