| commit | 1cd55f9dc7debdad0d54f4fad8617527433b4c4b | |
| author | Janosch Frank <frankja@linux.vnet.ibm.com> | |
| Mon, 11 Jan 2016 15:18:01 +0000 (11 16:18 +0100) | ||
| committer | Paolo Bonzini <pbonzini@redhat.com> | |
| Tue, 26 Jan 2016 14:58:13 +0000 (26 15:58 +0100) | ||
| tree | ce50477c78671051c3dc317bd404befb5739dc8b | treesnapshot (tar.gz zip) |
| parent | d8e44802f8ae320a454644fb010ef06f3ac8fb06 | commitdiff |
scripts/kvm/kvm_stat: Fix rlimit for unprivileged users
Setting the hard limit as a unprivileged user either returns an error
when it is higher than the current one or irreversibly sets it lower.
Therefore we leave the hardlimit untouched as long as we don't need to
raise it as this needs CAP_SYS_RESOURCE.
This gives admins the possibility to run the script as an unprivileged
user to increase security.
Signed-off-by: Janosch Frank <frankja@linux.vnet.ibm.com>
Message-Id: <1452525484-32309-32-git-send-email-frankja@linux.vnet.ibm.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Setting the hard limit as a unprivileged user either returns an error
when it is higher than the current one or irreversibly sets it lower.
Therefore we leave the hardlimit untouched as long as we don't need to
raise it as this needs CAP_SYS_RESOURCE.
This gives admins the possibility to run the script as an unprivileged
user to increase security.
Signed-off-by: Janosch Frank <frankja@linux.vnet.ibm.com>
Message-Id: <1452525484-32309-32-git-send-email-frankja@linux.vnet.ibm.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
| scripts/kvm/kvm_stat | diffblobblamehistory |