Re: [PATCH] Realtime LSM

Lee Revell
2004-09-14T02:22:42Z

On Mon, 2004-09-13 at 19:34, Chris Wright wrote:
> * Lee Revell (rlrevell@joe-job.com) wrote:
> > + # modprobe realtime mlock=0
> > +
> > + Grants realtime scheduling privileges without the ability to lock
> > + memory using mlock() or mlockall() system calls. This option can be
> > + used in conjunction with any of the other options.
> > +

> The mlock() bit is unecessary now. Use rlimits on the audio users.
> Which leaves realtime bits, plus others. I had a more generic module
> (per-capability) that would be a superset of this. Perhaps that's a
> better fit. I'm travelling this week, so forgive the spotty replies.

I think this would be fine. All we need is a way to allow users to run
SCHED_FIFO processes and use mlockall() without being root and without
having to patch the kernel. It's a pretty simple requirement.

Lee