From 3fa3cbb6caa2860971fb00ecc1d0476a426d334b Mon Sep 17 00:00:00 2001
From: smitsohu <smitsohu@gmail.com>
Date: Mon, 10 Sep 2018 22:53:02 +0200
Subject: [PATCH] small rlimits adjustment

---
 src/firejail/sandbox.c | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/src/firejail/sandbox.c b/src/firejail/sandbox.c
index b2d49c1e7ab..42dfbc3a5bd 100644
--- a/src/firejail/sandbox.c
+++ b/src/firejail/sandbox.c
@@ -1143,9 +1143,6 @@ int sandbox(void* sandbox_arg) {
 		errExit("fork");
 
 	if (app_pid == 0) {
-		// set rlimits
-		set_rlimits();
-
 #ifdef HAVE_APPARMOR
 		if (checkcfg(CFG_APPARMOR) && arg_apparmor) {
 			errno = 0;
@@ -1158,6 +1155,8 @@ int sandbox(void* sandbox_arg) {
 				printf("AppArmor enabled\n");
 		}
 #endif
+		// set rlimits
+		set_rlimits();
 
 		prctl(PR_SET_PDEATHSIG, SIGKILL, 0, 0, 0); // kill the child in case the parent died
 		start_application(0, fp);	// start app