rlimit sandbox on cygwin

Corinna Vinschen vinschen at redhat.com
Wed Jul 4 00:48:15 EST 2012


On Jul  3 22:45, Darren Tucker wrote:
> On Tue, Jul 03, 2012 at 01:23:48AM +1000, Darren Tucker wrote:
> > Hi all.
> > 
> > I have an old windows VM with an oldish cygwin that I use for the
> > regression tests.

Please use the latest one.  We don't support sshd on any pre 1.7
version of Cygwin anymore.

> > Investigating one of the test failures, I see that
> > it's for UsePrivilegeSeparation=sandbox, and it seems to be because
> > setrlimit(RLIMIT_FSIZE, ...) is not supported.
> > 
> > IMO, this isn't a big loss, since the most useful thing in the rlimit
> > "sandbox" is the descriptor limits.  Can anyone see a reason not to just
> > omit RLIMIT_FSIZE on cygwin?  It's a no-op unless you've explicitly set
> > "UsePrivilegeSeparation sandbox" in sshd_config.

A function equivalent to setrlimit(RLIMIT_FSIZE) is not supported
by Windows.  Therefore setting or checking this limit doesn't make
much sense.

> On second thought, it might be better to explicitly test RLIMIT_FSIZE in
> configure, like so.

Sounds good to me.


Thanks,
Corinna

-- 
Corinna Vinschen
Cygwin Project Co-Leader
Red Hat


More information about the openssh-unix-dev mailing list