diff options
| author | Kevin Krakauer <krakauer@google.com> | 2019-04-10 12:35:43 -0700 |
|---|---|---|
| committer | Shentubot <shentubot@google.com> | 2019-04-10 12:36:45 -0700 |
| commit | f7aff0aaa4320505933df838cf5b551b69d5e513 (patch) | |
| tree | f773a8942f4f025d370ee0d8c0e711944f168f4c /pkg/sentry/limits/linux.go | |
| parent | 0a0619216ec9ca96c181dd69d9bf31e7762090cb (diff) | |
Allow threads with CAP_SYS_RESOURCE to raise hard rlimits.
PiperOrigin-RevId: 242919489
Change-Id: Ie3267b3bcd8a54b54bc16a6556369a19e843376f
Diffstat (limited to 'pkg/sentry/limits/linux.go')
| -rw-r--r-- | pkg/sentry/limits/linux.go | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/pkg/sentry/limits/linux.go b/pkg/sentry/limits/linux.go index 295f9c398..e09d0d2fb 100644 --- a/pkg/sentry/limits/linux.go +++ b/pkg/sentry/limits/linux.go @@ -95,6 +95,6 @@ func NewLinuxDistroLimitSet() (*LimitSet, error) { // 1,048,576 ought to be enough for anyone. l := ls.Get(ProcessCount) l.Cur = 1 << 20 - ls.Set(ProcessCount, l) + ls.Set(ProcessCount, l, true /* privileged */) return ls, nil } |