From 6ec925f52d04ec8700e47cb005bd7ddc65ac5614 Mon Sep 17 00:00:00 2001 From: Timo Sirainen Date: Thu, 14 May 2009 14:18:16 -0400 Subject: [PATCH] master: vsz_limit wasn't being enforced. --HG-- branch : HEAD --- src/master/service-process.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/master/service-process.c b/src/master/service-process.c index 8ebdb67f61..ce69859467 100644 --- a/src/master/service-process.c +++ b/src/master/service-process.c @@ -14,6 +14,7 @@ #include "env-util.h" #include "fd-close-on-exec.h" #include "restrict-access.h" +#include "restrict-process-size.h" #include "master-service-settings.h" #include "dup2-array.h" #include "service.h" @@ -246,6 +247,9 @@ static void drop_privileges(struct service *service, if (auth_args != NULL && service->set->master_set->mail_debug) env_put("DEBUG=1"); + if (service->set->vsz_limit != 0) + restrict_process_size(service->set->vsz_limit, -1U); + restrict_access_init(&rset); rset.uid = service->uid; rset.gid = service->gid; -- 2.47.3