isa/sudo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Restore core dump resource limit before the PAM session module is run.

Browse Source 
Otherwise, we may override the limits set by PAM.
Bug #894
This commit is contained in:
Todd C. Miller
2019-08-20 07:25:53 -06:00
parent b98b82e4a2
commit 5e692576c9
1 changed files with 7 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
src/exec.c
View File

@@ -119,10 +119,6 @@ exec_setup(struct command_details *details, const char *ptyname, int ptyfd)
} }
#endif #endif
/* Restore coredumpsize resource limit before running. */
if (sudo_conf_disable_coredump())
disable_coredump(true);
if (details->pw != NULL) { if (details->pw != NULL) {
#ifdef HAVE_PROJECT_H #ifdef HAVE_PROJECT_H
set_project(details->pw); set_project(details->pw);
@@ -410,6 +406,13 @@ sudo_execute(struct command_details *details, struct command_status *cstat)
} }
} }
/*
* Restore coredumpsize resource limit before running.
* We must do this *before* calling the PAM session module.
*/
if (sudo_conf_disable_coredump())
disable_coredump(true);
/* /*
* Run the command in a new pty if there is an I/O plugin or the policy * Run the command in a new pty if there is an I/O plugin or the policy
* has requested a pty. If /dev/tty is unavailable and no I/O plugin * has requested a pty. If /dev/tty is unavailable and no I/O plugin