Hello.

I have a Gentoo amd64 machine with man-db 2.6.3 and linux kernel 3.5.4 patched with grsecurity patches. Every time I run `man man` as root I get lots of the following warnings in syslog:

grsec: From 192.168.1.4: denied resource overstep by requesting 106 for RLIMIT_NPROC against limit 100 for /usr/bin/man[man:15604] uid/euid:0/13 gid/egid:0/0, parent /usr/bin/man[man:15603] uid/euid:0/13 gid/egid:0/0

When this command run as non-root user from a wheel group or as man user itself everything is fine.
Appropriate parts of limits.conf:

*               hard    nproc           100
@wheel          hard    nproc           2048
man             hard    nproc           500

Of course, root is also in wheel group and `ulimit -aH` as root says:

core file size          (blocks, -c) 100000
data seg size           (kbytes, -d) unlimited
scheduling priority             (-e) 0
file size               (blocks, -f) unlimited
pending signals                 (-i) 30498
max locked memory       (kbytes, -l) 64
max memory size         (kbytes, -m) unlimited
open files                      (-n) 4096
pipe size            (512 bytes, -p) 8
POSIX message queues     (bytes, -q) 819200
real-time priority              (-r) 0
stack size              (kbytes, -s) unlimited
cpu time               (seconds, -t) unlimited
max user processes              (-u) 2048
virtual memory          (kbytes, -v) unlimited
file locks                      (-x) unlimited

I wonder, why root user is treated so specially by man-db and doesn't have the appropriate limits? And why there are more than 100 threads (or forks or smth else) just to show man page?

I've attached a couple of debugging outputs and an strace one. Could you please answer the above questions?