Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1751257AbZLMFUh (ORCPT ); Sun, 13 Dec 2009 00:20:37 -0500 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1750813AbZLMFUg (ORCPT ); Sun, 13 Dec 2009 00:20:36 -0500 Received: from ey-out-2122.google.com ([74.125.78.25]:19257 "HELO ey-out-2122.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with SMTP id S1750780AbZLMFUf (ORCPT ); Sun, 13 Dec 2009 00:20:35 -0500 DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type; b=VfrCGigQGN3w/GgvdbQvQidIs3baeMDVqXfr4h9FKh+Oj144+rN+CuNbn9Qea3wmZE H9XfKBjQmGWSuaUwxdyQo0wWHksOBdKk71WUjhrtSyUvzhYageYaNmStqDuLClfEbQvc cO3NfYrs6MW3YiWGPDd9vawZC+YMX4mg+lEZw= MIME-Version: 1.0 In-Reply-To: <20091213050900.GC4369@heat> References: <20091213034418.GA4416@heat> <20091213050900.GC4369@heat> From: Ulrich Drepper Date: Sat, 12 Dec 2009 21:20:13 -0800 Message-ID: Subject: Re: setrlimit(RLIMIT_NETWORK) vs. prctl(???) To: Michael Stone Cc: linux-kernel@vger.kernel.org, netdev@vger.kernel.org, linux-security-module@vger.kernel.org, Andi Kleen , David Lang , Oliver Hartkopp , Alan Cox , Herbert Xu , Valdis Kletnieks , Bryan Donlan , =?UTF-8?Q?R=C3=A9mi_Denis=2DCourmont?= , Evgeniy Polyakov , "C. Scott Ananian" , James Morris , "Eric W. Biederman" , Bernie Innocenti , Mark Seaborn Content-Type: text/plain; charset=UTF-8 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 875 Lines: 18 On Sat, Dec 12, 2009 at 21:09, Michael Stone wrote: >> That being said, I'm not wedded to the decision. Could you give me some >> more >> specific examples of the kinds of changes in low-level userspace code that >> you're worried about? It was an accident that I sent the email privately. As summarized in the paraphrased comment, it's a pain to deal with rlimit extensions. It's easy enough to do all this using prctl() with the same semantics and without forcing any other code to be modified. I let others more competent to judge the usefulness. But using rlimit as the interface is just plain wrong. -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/