Re: RLIMIT_NPROC can be exceeded via setuid/exec

2000-01-21 Thread Matthew Reimer
I solved the problem by making a small syscall KLD get_uid_nproc that just returns the result of chgproccnt(SCARG(uap, uid), 0); and by having suexec use this syscall to determine whether or not to exec the CGI: stat.version = sizeof(stat); mod_id = modfind("get_uid_nproc");

Re: RLIMIT_NPROC can be exceeded via setuid/exec

2000-01-21 Thread Michael Bacarella
On Fri, 21 Jan 2000, Doug White wrote: > On Thu, 20 Jan 2000, Matthew Reimer wrote: > > Background: in an attempt to manage our webserver to keep too many CGIs > > from taking down the machine, I've been experimenting with RLIMIT_NPROC. > > This appears to work fine when forking new processes,

Re: RLIMIT_NPROC can be exceeded via setuid/exec

2000-01-21 Thread Doug White
On Thu, 20 Jan 2000, Matthew Reimer wrote: > My question is, should setuid() fail if the target user's maximum number > of processes (RLIMIT_NPROC) would be exceeded? > > Background: in an attempt to manage our webserver to keep too many CGIs > from taking down the machine, I've been experimenti

RLIMIT_NPROC can be exceeded via setuid/exec

2000-01-20 Thread Matthew Reimer
My question is, should setuid() fail if the target user's maximum number of processes (RLIMIT_NPROC) would be exceeded? Background: in an attempt to manage our webserver to keep too many CGIs from taking down the machine, I've been experimenting with RLIMIT_NPROC. This appears to work fine when f