[rsbac] RSBAC RES Module

Ralf Horstmann ralf.horstmann at webwasher.com
Tue Jun 14 21:51:49 CEST 2005


Hey Chirag,

on Tue, 14 Jun 2005, Chirag Pandya wrote:

> As you can see, fwadmin inherits settings for user1.  I tried to
> create a large file for fwadmin and the limits were enforced.
> 
> If I use login and allow fwadmin to login in directly, he does end up
> with unlimited resources as configured.
> 
> Is this a "su" bug?  Has anyone else seen this behaviour?

From looking at the code I would say that you need to use res_min
instead of res_max to raise the value. As far as I understand, res_max
is only enforced if current limits are higher than the given maximum.
res_min raises the values, if they current limits are lower than given
minimum.

Ralf.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://rsbac.dyndns.org/pipermail/rsbac/attachments/20050614/0743a7f5/attachment.bin


More information about the rsbac mailing list