grsecurity forums

by **Mr.Nobody** » Wed Sep 17, 2003 10:20 am

Please answer: what for execve limiting in GRSecurity?
Linux allow to limit resources used by a process (via /etc/security/limits.conf) , for example - a number of processes (nproc). But what is the goal of checking of limitations on resources with execve() calls (execve() doesn't create processes - so what to fear?)?

Sorry for bad English.
:roll:

by **Julien TINNES** » Wed Sep 17, 2003 10:26 pm

Hello,

More exactly, the kernel can enforce rlimits, pam can set rlimits and uses /etc/security/limits.conf on debian.

Limitation on resource witch execve is usefull for processus doing fork() before changing uid. For exemple, telnetd will do a fork as root, so it is not limited, then it changes uid and doese execve.