Relay-Version: version B 2.10 5/3/83; site utzoo.UUCP
Path: utzoo!linus!philabs!cmcl2!seismo!ut-sally!pyramid!isieng!ron
From: ron@isieng.UUCP (Ronald P. Hughes)
Newsgroups: net.unix-wizards
Subject: Max procs per user with setuid programs
Message-ID: <211@isieng.UUCP>
Date: Fri, 21-Feb-86 14:47:23 EST
Article-I.D.: isieng.211
Posted: Fri Feb 21 14:47:23 1986
Date-Received: Mon, 24-Feb-86 06:04:58 EST
Reply-To: ron@isieng.UUCP (Ronald P. Hughes)
Organization: Integrated Solutions, San Jose, CA
Lines: 16
Keywords: KID_MAX, maxuprc, setuid

xxx

We have a customer whose users all spend most of their time executing
a program with the setuid bit turned on.  Eventually they start getting
"No more processes" messages, because they are exceeding the maximum-
number-of-processes-per-user limit.  The users are actually all logged
into different accounts, and hence their processes have different real
uids, but since they are all executing setuid program(s) with the same
uid, their effective uids are the same.

Fork currently compares effective uids when counting processes to
determine whether maxuprc would be exceeded.  Should it perhaps be
comparing real uids?

Ronald P. Hughes    Integrated Solutions, Inc.    (408)943-1902
...!pyramid!isieng!ron    or    ...!ucbvax!ucscc!isieng!ron