o Add pam_prep_user function to call pam_setcred() for the target user;

on Linux this often sets resource limits.

set_perms.c

@@ -281,6 +281,10 @@ runas_setup()
 #endif
 
     if (runas_pw->pw_name != NULL) {
+#ifdef HAVE_PAM
+	pam_prep_user(runas_pw);
+#endif /* HAVE_PAM */
+
 #ifdef HAVE_LOGIN_CAP_H
 	if (def_flag(I_USE_LOGINCLASS)) {
 	    /*

sudo.h

@@ -222,6 +222,7 @@ int touch		__P((char *, time_t));
 int user_is_exempt	__P((void));
 void set_fqdn		__P((void));
 char *sudo_getepw	__P((struct passwd *));
+int pam_prep_user	__P((struct passwd *));
 YY_DECL;
 
 /* Only provide extern declarations outside of sudo.c. */