>The above code change would allow growing L set if new L' set is a subset >of the effective set of the calling process. >What would be the impact? Would it break anything?
The limit has been designed as a limit you cannot escape. Changing that would break a promise the privilege system makes. My question then is: who do you want to give privileges? Specifically in the case of a zone, the limit set clearly defines with a zone can do; allowing other processes to change it, even from the global zone, would violate the assumption that a zone is limited to the limit set in the zsched (init) process. Casper _______________________________________________ opensolaris-code mailing list opensolaris-code@opensolaris.org http://mail.opensolaris.org/mailman/listinfo/opensolaris-code
