Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 368161

Summary: x11-apps/xinit w/ sys-apps/openrc-0.8.2-r1 start-stop-daemon ignores PAM settings for user root
Product: Gentoo Linux Reporter: Emil Wojak <korionis>
Component: Current packagesAssignee: Gentoo X packagers <x11>
Status: RESOLVED WONTFIX    
Severity: normal    
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard:
Package list:
Runtime testing required: ---

Description Emil Wojak 2011-05-20 12:16:34 UTC
I wanted to impose limits onto my users using pam_limits module, so I put the following into /etc/security/limits.conf
*                hard    nproc           20
root             hard    nproc           240
someuser         hard    nproc           240

I want someuser to run max. 240 processes or threads. I use GDM as a login manager, which runs as root. I had to set the same limit on root, because otherwise root would run with nproc limited to 20, which would get inherited by someuser's session.
This configuration worked until I updated to baselayout-2 and openrc. After the upgrade the GNOME session would fail to start because of nproc limit set to 20. I found a workaround after some investigation and much help from http://blog.flameeyes.eu/2010/10/02/service-limits
Things started working again after having the following line added to limits.conf
nobody           hard    nproc           240

I believe start-stop-daemon should not pass the nobody user to PAM when the user is not set using the --user option. Instead it should use the user, that the program runs as (that would be root in this case).
Comment 1 Jeroen Roovers gentoo-dev 2011-05-23 19:17:54 UTC
(In reply to comment #0)
> I believe start-stop-daemon should not pass the nobody user to PAM when the
> user is not set using the --user option. Instead it should use the user, that
> the program runs as (that would be root in this case).

Which init.d script would that be?
Comment 2 Emil Wojak 2011-05-23 20:27:14 UTC
(In reply to comment #1)
> Which init.d script would that be?

Sorry, I forgot to state that clearly. That's /etc/init.d/xdm with start-stop-daemon invoked from /etc/X11/startDM.sh
Comment 3 Matt Turner gentoo-dev 2019-05-15 18:15:41 UTC
This bug is pretty ancient at this point, and I'm not sure I understand it.

If someone is still interested, please reopen.