chiark / gitweb /
~ianmdlvl / elogind.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: c51cbfd) | patch
timesyncd: set RLIMIT_NPROC to 2
authorLennart Poettering <lennart@poettering.net>
Tue, 27 Jan 2015 01:33:46 +0000 (02:33 +0100)
committerLennart Poettering <lennart@poettering.net>
Tue, 27 Jan 2015 01:33:46 +0000 (02:33 +0100)
commit7e26029ff36d6112bd8c3273327c97708f9ee61e
tree38c198d09c71c44b1393d7b7128472315f56ef96tree | snapshot
parentc51cbfdcc7f38438553e4c2c60499f6aea7cc504commit | diff
timesyncd: set RLIMIT_NPROC to 2

This way timesyncd cannot be used to fork().

Note that it generally is not safe to use RLIMIT_NPROC, since it breaks
running the same daemon in multiple containers if they do not use user
namespacing. However, timesyncd is excepted from running in a container
anyway, hence it is safe in this case.
src/timesync/timesyncd.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.