master: vsz_limit wasn't being enforced.

--HG--
branch : HEAD

diff --git a/src/master/service-process.c b/src/master/service-process.c
index 8ebdb67f61a7f36f289285baa08ad83b99e1b9d3..ce698594679da008a45e9cf31b7b99be5b1f72fe 100644 (file)
--- a/src/master/service-process.c
+++ b/src/master/service-process.c
@@ -14,6 +14,7 @@
 #include "env-util.h"
 #include "fd-close-on-exec.h"
 #include "restrict-access.h"
+#include "restrict-process-size.h"
 #include "master-service-settings.h"
 #include "dup2-array.h"
 #include "service.h"
@@ -246,6 +247,9 @@ static void drop_privileges(struct service *service,
        if (auth_args != NULL && service->set->master_set->mail_debug)
                env_put("DEBUG=1");
 
+       if (service->set->vsz_limit != 0)
+               restrict_process_size(service->set->vsz_limit, -1U);
+
        restrict_access_init(&rset);
        rset.uid = service->uid;
        rset.gid = service->gid;