isa/sudo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

macOS does not allow rlim_cur to be set to RLIM_INFINITY for RLIMIT_NOFILE.

Browse Source 
We need to use OPEN_MAX instead as per the macOS setrlimit manual.
Bug #904
This commit is contained in:
Todd C. Miller
2019-10-29 08:28:52 -06:00
parent 0129f3a72a
commit 0d8062c100
1 changed files with 21 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
src/limits.c
View File

@@ -37,11 +37,17 @@
#ifdef __linux__
# include <sys/prctl.h>
#endif
#include <limits.h>
#include "sudo.h"
#ifndef OPEN_MAX
# define OPEN_MAX 256
#endif
static struct saved_limit {
int resource;
rlim_t fallback;
bool saved;
struct rlimit limit;
} saved_limits[] = {
@@ -51,7 +57,7 @@ static struct saved_limit {
{ RLIMIT_CPU },
{ RLIMIT_DATA },
{ RLIMIT_FSIZE },
{ RLIMIT_NOFILE },
{ RLIMIT_NOFILE, OPEN_MAX },
#ifdef RLIMIT_NPROC
{ RLIMIT_NPROC },
#endif
@@ -162,6 +168,7 @@ unlimit_sudo(void)
{
struct rlimit inf = { RLIM_INFINITY, RLIM_INFINITY };
unsigned int idx;
int rc;
debug_decl(unlimit_sudo, SUDO_DEBUG_UTIL)
/* Set resource limits to unlimited and stash the old values. */
@@ -172,11 +179,21 @@ unlimit_sudo(void)
lim->saved = true;
if (setrlimit(lim->resource, &inf) == -1) {
struct rlimit rl = lim->limit;
rl.rlim_cur = rl.rlim_max;
if (setrlimit(lim->resource, &rl) == -1)
rl.rlim_cur = MAX(rl.rlim_max, lim->fallback);
if ((rc = setrlimit(lim->resource, &rl)) == -1) {
if (lim->fallback != 0) {
/* macOS won't set rlim_cur to RLIM_INFINITY for NOFILE */
rc = 0;
if (lim->fallback > lim->limit.rlim_cur) {
rl.rlim_cur = lim->fallback;
rc = setrlimit(lim->resource, &rl);
}
}
if (rc == -1)
sudo_warn("setrlimit(%d)", lim->resource);
}
}
}
debug_return;
}