This patch adds support for the rttime rlimit (aka RLIMIT_RTTIME),
available since the 2.6.25 kernel, according to the getrlimit(2)
man page; see that man page for more details on this rlimit.
An acceptance test is also added.

Signed-off-by: Steve Beattie <[email protected]>
---
 parser/parser_misc.c                            |    3 +++
 parser/parser_yacc.y                            |    1 +
 parser/tst/simple_tests/rlimits/ok_rlimit_18.sd |    7 +++++++
 3 files changed, 11 insertions(+)

Index: b/parser/parser_misc.c
===================================================================
--- a/parser/parser_misc.c
+++ b/parser/parser_misc.c
@@ -175,6 +175,9 @@ static struct keyword_table rlimit_table
 #ifdef RLIMIT_RTPRIO
        {"rtprio",              RLIMIT_RTPRIO},
 #endif
+#ifdef RLIMIT_RTTIME
+       {"rttime",              RLIMIT_RTTIME},
+#endif
        /* terminate */
        {NULL, 0}
 };
Index: b/parser/parser_yacc.y
===================================================================
--- a/parser/parser_yacc.y
+++ b/parser/parser_yacc.y
@@ -764,6 +764,7 @@ rules: rules TOK_SET TOK_RLIMIT TOK_ID T
                        tmp = strtoll($6, &end, 0);
                        switch (limit) {
                        case RLIMIT_CPU:
+                       case RLIMIT_RTTIME:
                                if (!end || $6 == end || tmp < 0)
                                        yyerror("RLIMIT '%s' invalid value 
%s\n", $4, $6);
                                if (*end == '\0' ||
Index: b/parser/tst/simple_tests/rlimits/ok_rlimit_18.sd
===================================================================
--- /dev/null
+++ b/parser/tst/simple_tests/rlimits/ok_rlimit_18.sd
@@ -0,0 +1,7 @@
+#
+#=DESCRIPTION simple realtime time rlimit test
+#=EXRESULT PASS
+
+profile rlimit {
+  set rlimit rttime <= 60minutes,
+}


-- 
AppArmor mailing list
[email protected]
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/apparmor

Reply via email to