Re: [PATCH] Realtime LSM

Chris Wright
2004-10-01T01:20:59Z

* Jack O'Quin (joq@io.com) wrote:
> Lee Revell <rlrevell@joe-job.com> writes:
>
> > Another issue that was raised was that the mlock stuff is also
> > unnecessary, because rlimits can do this now. Is this the case?
>
> I don't know. The idea was not explained in enough detail for me to
> understand if it would be simple enough to administer. Where can I
> find out more?

This uses the basic rlimits infrastructure. You can manage it manually
in a shell with ulimit -l, or you can use pam (pam_limits) to configure
per uid limits. There's a pam doc that describes limits, and a manpage
for ulimit. It's really easy to use, and should eliminate the need for
the mlock part of that module.

thanks,
-chris
--
Linux Security Modules http://lsm.immunix.org http://lsm.bkbits.net