summaryrefslogtreecommitdiffhomepage
path: root/pkg/sentry/state/BUILD
diff options
context:
space:
mode:
authorKevin Krakauer <krakauer@google.com>2020-04-17 15:31:51 -0700
committergVisor bot <gvisor-bot@google.com>2020-04-17 15:33:05 -0700
commite838290e671c9d72dbaa3aba13bf0c35f1147de4 (patch)
treeb99612b463da2f05a5454417d4d3c98e048096a5 /pkg/sentry/state/BUILD
parent486759a37d61b770019a81af00e0e733c655b3a8 (diff)
prlimit: don't check credentials on self
prlimit was erroneously comparing UIDs and GIDs when getting/setting a process' own limits. From the manpage: To set or get the resources of a process other than itself, the caller must have the CAP_SYS_RESOURCE capability, or the real, effective, and saved set user IDs of the target process must match the real user ID of the caller and the real, effective, and saved set group IDs of the target process must match the real group ID of the caller. PiperOrigin-RevId: 307127266
Diffstat (limited to 'pkg/sentry/state/BUILD')
0 files changed, 0 insertions, 0 deletions