From: Reto Buerki <buerki@swiss-it.ch>
To: linux-kernel@vger.kernel.org
Subject: Re: "core dump helper" runs always as root
Date: Fri, 18 Jul 2008 13:01:53 +0200 [thread overview]
Message-ID: <48807821.8050504@swiss-it.ch> (raw)
> If we run the usermode helper with the privileges of the dying process, what do
> we do about rlimit enforcement? They don't have a PAM environment, so either
> they get the default rlimits, or we have to make them inherit their limits from
> the dying process. This is very problematic if the process died due to
> exceeding an rlimit.
I'm not sure if I understand your objection correctly, but I thought
RLIMIT_CORE is ignored when using piped syntax with core_pattern.
At least this is how I interpret the code and the corresponding comment
in do_coredump() (fs/exec.c). The comment explicitly states that there's
no need to check RLIMIT_CORE value because file size limits and
permissions apply as they do with any other process.
There are also no further rlimit checks in usermode helper functions, at
least I could not find any ...
- reto
next reply other threads:[~2008-07-18 11:23 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2008-07-18 11:01 Reto Buerki [this message]
-- strict thread matches above, loose matches on Subject: below --
2008-06-03 18:20 "core dump helper" runs always as root Christian Perle
2008-06-03 21:55 ` Chris Snook
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=48807821.8050504@swiss-it.ch \
--to=buerki@swiss-it.ch \
--cc=linux-kernel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.