Max procs per user with setuid programs

[Ronald P. Hughes]

xxx

We have a customer whose users all spend most of their time executing
a program with the setuid bit turned on.  Eventually they start getting
"No more processes" messages, because they are exceeding the maximum-
number-of-processes-per-user limit.  The users are actually all logged
into different accounts, and hence their processes have different real
uids, but since they are all executing setuid program(s) with the same
uid, their effective uids are the same.

Fork currently compares effective uids when counting processes to
determine whether maxuprc would be exceeded.  Should it perhaps be
comparing real uids?

Ronald P. Hughes    Integrated Solutions, Inc.    (408)943-1902
...!pyramid!isieng!ron    or    ...!ucbvax!ucscc!isieng!ron