[Pkg-pulseaudio-devel] Bug#521786: pulseaudio: resource overstep for RLIMIT_CPU despite "cpu time" set to unlimited

[Francois Marier]

Package: pulseaudio
Version: 0.9.14-2
Severity: normal

I am running a grsecurity-enhanced kernel and I keep seeing this message in my logs:

  grsec: denied resource overstep by requesting 270 for RLIMIT_CPU against limit 270 for /usr/bin/pulseaudio[pulseaudio:8480] uid/euid:1000/1000 gid/egid:1000/1000, parent /sbin/init[init:1] uid/euid:0/0 gid/egid:0/0

My own user (uid=1000) is a member of the pulse-rt group.

Here are the ulimit settings for that same user:

$ ulimit -a
core file size          (blocks, -c) 0
data seg size           (kbytes, -d) unlimited
scheduling priority             (-e) 0
file size               (blocks, -f) unlimited
pending signals                 (-i) 16382
max locked memory       (kbytes, -l) 64
max memory size         (kbytes, -m) unlimited
open files                      (-n) 1024
pipe size            (512 bytes, -p) 8
POSIX message queues     (bytes, -q) 819200
real-time priority              (-r) 0
stack size              (kbytes, -s) 8192
cpu time               (seconds, -t) unlimited
max user processes              (-u) unlimited
virtual memory          (kbytes, -v) unlimited
file locks                      (-x) unlimited

Cheers,
Francois

-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.29-grsec (SMP w/2 CPU cores; PREEMPT)
Locale: LANG=fr_CA.UTF-8, LC_CTYPE=fr_CA.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages pulseaudio depends on:
ii  adduser                       3.110      add and remove users and groups
ii  consolekit                    0.3.0-2    framework for defining and trackin
ii  libasound2                    1.0.19-1   shared library for ALSA applicatio
ii  libasyncns0                   0.3-1      Asyncronous name service query lib
ii  libc6                         2.9-6      GNU C Library: Shared libraries
ii  libcap2                       1:2.16-4   support for getting/setting POSIX.
ii  libdbus-1-3                   1.2.12-1   simple interprocess messaging syst
ii  libgdbm3                      1.8.3-4    GNU dbm database routines (runtime
ii  libltdl3                      1.5.26-4   A system independent dlopen wrappe
ii  liboil0.3                     0.3.15-1   Library of Optimized Inner Loops
ii  libpolkit-dbus2               0.9-3      library for accessing PolicyKit vi
ii  libpolkit2                    0.9-3      library for accessing PolicyKit
ii  libpulsecore9                 0.9.14-2   PulseAudio sound server core
ii  libsamplerate0                0.1.7-2    audio rate conversion library
ii  libsndfile1                   1.0.19-2   Library for reading/writing audio 
ii  libspeexdsp1                  1.2~rc1-1  The Speex extended runtime library
ii  libwrap0                      7.6.q-16   Wietse Venema's TCP wrappers libra
ii  lsb-base                      3.2-22     Linux Standard Base 3.2 init scrip

Versions of packages pulseaudio recommends:
ii  gstreamer0.10-pulseaudio      0.10.14-2  GStreamer plugin for PulseAudio
ii  libasound2-plugins            1.0.19-2   ALSA library additional plugins
ii  padevchooser                  0.9.3-2    PulseAudio Device Chooser
ii  paprefs                       0.9.6-2    PulseAudio Preferences
ii  pulseaudio-esound-compat      0.9.14-2   PulseAudio ESD compatibility layer
ii  pulseaudio-module-hal         0.9.14-2   HAL device detection module for Pu
ii  pulseaudio-module-x11         0.9.14-2   X11 module for PulseAudio sound se

Versions of packages pulseaudio suggests:
ii  paman                0.9.4-1             PulseAudio Manager
ii  pavucontrol          0.9.6+svn20080426-1 PulseAudio Volume Control
ii  pavumeter            0.9.3-1             PulseAudio Volume Meter
ii  pulseaudio-utils     0.9.14-2            Command line tools for the PulseAu

-- no debconf information