[prev in list] [next in list] [prev in thread] [next in thread] 

List:       rsbac
Subject:    Re: [rsbac] RSBAC RES Module
From:       Chirag Pandya <cpandya () gmail ! com>
Date:       2005-06-14 21:08:13
Message-ID: ecf5ee43050614140832b86ae6 () mail ! gmail ! com
[Download RAW message or body]

Hello Ralf,
I tried (as you suggested) setting res_min but it doesn't work over su
(to a power user).

I set res_min fsize for default user (-4) to 10M.  I then set res_min
fsize = 0 for admin
When I try to create a large file as regular user, the limit is
enforced as designed.  However, when I su to admin, the limit is still
enforced.

--
Chirag

On 6/14/05, Ralf Horstmann <ralf.horstmann@webwasher.com> wrote:
> Hey Chirag,
> 
> on Tue, 14 Jun 2005, Chirag Pandya wrote:
> 
> > As you can see, fwadmin inherits settings for user1.  I tried to
> > create a large file for fwadmin and the limits were enforced.
> >
> > If I use login and allow fwadmin to login in directly, he does end up
> > with unlimited resources as configured.
> >
> > Is this a "su" bug?  Has anyone else seen this behaviour?
> 
> From looking at the code I would say that you need to use res_min
> instead of res_max to raise the value. As far as I understand, res_max
> is only enforced if current limits are higher than the given maximum.
> res_min raises the values, if they current limits are lower than given
> minimum.
> 
> Ralf.
> 
> 
> 
> BodyID:89894210.2.n.logpart (stored separately)
> 
>
_______________________________________________
rsbac mailing list
rsbac@rsbac.org
http://www.rsbac.org/mailman/listinfo/rsbac
[prev in list] [next in list] [prev in thread] [next in thread]