We cannot offload it to the root process either because not all
sandboxes have access to that.....
Really need to fix syslog so that it starts before dhcpcd.
}
#if !defined(HAVE_CAPSICUM) && !defined(HAVE_PLEDGE)
- /* Prohibit large files */
- if (setrlimit(RLIMIT_FSIZE, &rzero) == -1) {
- logerr("setrlimit RLIMIT_FSIZE");
- return -1;
+ /*
+ * Prohibit large files
+ * Cannot offload this to the privilged actioneer because
+ * only the master process has access to it.
+ */
+ if (ctx->logfile == NULL) {
+ if (setrlimit(RLIMIT_FSIZE, &rzero) == -1) {
+ logerr("setrlimit RLIMIT_FSIZE");
+ return -1;
+ }
}
#endif