implemented --rlimit-cpu - set max CPU time for processes running in the sandbox; for issue #1614, more to come...

1 files changed, 5 insertions, 0 deletions

diff --git a/src/firejail/profile.c b/src/firejail/profile.c
index 622306c22..9f49d7405 100644
--- a/src/firejail/profile.c
+++ b/src/firejail/profile.c
@@ -1022,6 +1022,11 @@ int profile_check_line(char *ptr, int lineno, const char *fname) {
                         sscanf(ptr + 14, "%llu", &cfg.rlimit_nofile);
                         arg_rlimit_nofile = 1;
                 }
+                else if (strncmp(ptr, "rlimit-cpu ", 11) == 0) {
+                        check_unsigned(ptr + 11, "Error: invalid rlimit in profile file: ");
+                        sscanf(ptr + 11, "%llu", &cfg.rlimit_cpu);
+                        arg_rlimit_cpu = 1;
+                }
                 else if (strncmp(ptr, "rlimit-nproc ", 13) == 0) {
                         check_unsigned(ptr + 13, "Error: invalid rlimit in profile file: ");
                         sscanf(ptr + 13, "%llu", &cfg.rlimit_nproc);