From: Timo Sirainen <tss@iki.fi>
Date: Thu, 14 May 2009 18:18:16 +0000 (-0400)
Subject: master: vsz_limit wasn't being enforced.
X-Git-Tag: 2.0.alpha1~776
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=6ec925f52d04ec8700e47cb005bd7ddc65ac5614;p=thirdparty%2Fdovecot%2Fcore.git

master: vsz_limit wasn't being enforced.

--HG--
branch : HEAD
---

diff --git a/src/master/service-process.c b/src/master/service-process.c
index 8ebdb67f61..ce69859467 100644
--- a/src/master/service-process.c
+++ b/src/master/service-process.c
@@ -14,6 +14,7 @@
 #include "env-util.h"
 #include "fd-close-on-exec.h"
 #include "restrict-access.h"
+#include "restrict-process-size.h"
 #include "master-service-settings.h"
 #include "dup2-array.h"
 #include "service.h"
@@ -246,6 +247,9 @@ static void drop_privileges(struct service *service,
 	if (auth_args != NULL && service->set->master_set->mail_debug)
 		env_put("DEBUG=1");
 
+	if (service->set->vsz_limit != 0)
+		restrict_process_size(service->set->vsz_limit, -1U);
+
 	restrict_access_init(&rset);
 	rset.uid = service->uid;
 	rset.gid = service->gid;