diff options
| author | Ian Lance Taylor <iant@golang.org> | 2024-08-21 13:43:42 -0700 |
|---|---|---|
| committer | Gopher Robot <gobot@golang.org> | 2024-08-30 19:55:07 +0000 |
| commit | 44483133fd991ec929fb1404e087d08f679c8d28 (patch) | |
| tree | bdaacb8208b65fb62b996f68e64193104dbd43db /src/syscall/syscall_linux.go | |
| parent | 7b0fdd13230038aabf249f0335097a2cdc233f5c (diff) | |
| download | go-44483133fd991ec929fb1404e087d08f679c8d28.tar.xz | |
syscall: honor prlimit set by a different process
On Linux one process can call prlimit to change the resource limit
of another process. With this change we treat that as though the
current process called prlimit (or setrlimit) to set its own limit.
The cost is one additional getrlimit system call per fork/exec,
for cases in which the rlimit Cur and Max values differ at startup.
This revealed a bug: the setrlimit (not Setrlimit) function should not
change the cached rlimit. That means that it must call prlimit1, not prlimit.
Fixes #66797
Change-Id: I46bfd06e09ab7273fe8dd9b5b744dffdf31d828b
Reviewed-on: https://go-review.googlesource.com/c/go/+/607516
Auto-Submit: Ian Lance Taylor <iant@golang.org>
Reviewed-by: Damien Neil <dneil@google.com>
Reviewed-by: Ian Lance Taylor <iant@google.com>
Reviewed-by: Aleksa Sarai <cyphar@cyphar.com>
Reviewed-by: Kirill Kolyshkin <kolyshkin@gmail.com>
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Auto-Submit: Ian Lance Taylor <iant@google.com>
Diffstat (limited to 'src/syscall/syscall_linux.go')
| -rw-r--r-- | src/syscall/syscall_linux.go | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/syscall/syscall_linux.go b/src/syscall/syscall_linux.go index 1fe422d691..003f7a538c 100644 --- a/src/syscall/syscall_linux.go +++ b/src/syscall/syscall_linux.go @@ -1296,7 +1296,7 @@ func Getrlimit(resource int, rlim *Rlimit) (err error) { // setrlimit sets a resource limit. // The Setrlimit function is in rlimit.go, and calls this one. func setrlimit(resource int, rlim *Rlimit) (err error) { - return prlimit(0, resource, rlim, nil) + return prlimit1(0, resource, rlim, nil) } // prlimit changes a resource limit. We use a single definition so that |