Bug 565

With the current sudo code base, it is impossible to set the limit on maximum number of processes owned by a user to unlimited. 
This is a result of the fix incorporated for BZ #401:
http://www.sudo.ws/bugs/show_bug.cgi?id=401

This is the change set:
http://www.sudo.ws/repos/sudo/rev/bb14802d48b1

The code in exec_setup resets RLIMIT_NPROC to the value applicable to the parent process if both rl.rlim_cur && rl.rlim_max are == RLIM_INFINITY. 

For example:

[root@rhel63-ipa1 ~]# cat /etc/pam.d/sudo
#%PAM-1.0
auth       include      system-auth
account    include      system-auth
password   include      system-auth
session    optional     pam_keyinit.so revoke
session    required     pam_limits.so

[root@rhel63-ipa1 ~]# cat /etc/security/limits.d/xman.conf 
xman          soft    nproc    unlimited
xman          hard    nproc    unlimited

[root@rhel63-ipa1 ~]# ulimit -Su; ulimit -Hu
1024
7819

[root@rhel63-ipa1 ~]# sudo -u xman /bin/bash
[xman@rhel63-ipa1 root]$ ulimit -Su; ulimit -Hu
1024
7819
[xman@rhel63-ipa1 root]$ 

I have tested this by reverting the fix for #401 and the test case behaves as expected. 

After reading the comments in BZ #401, it seems that this patch is only useful for Suse Linux users. If this is the case, can this functionality be explicitly turned on with a switch during compile time? This will allow sudo to behave as expected for users of other distributions.