Re: [openib-general] Re: [PATCH][RFC][0/4] InfiniBand userspace verbs implementation

Chris Wright
2005-04-21T20:12:59Z

* Timur Tabi (timur.tabi@ammasso.com) wrote:
> Andy Isaacson wrote:
> >Do you guys simply raise RLIMIT_MEMLOCK to allow apps to lock their
> >pages? Or are you doing something more nasty?
>
> A little more nasty. I raise RLIMIT_MEMLOCK in the driver to "unlimited"
> and also set cap_raise(IPC_LOCK). I do this because I need to support all
> 2.4 and 2.6 kernel versions with the same driver, but only 2.6.10 and later
> have any support for non-root mlock().

FYI, that will not work on all 2.6 kernels. Specifically anything that's
not using capabilities.

thanks,
-chris
--
Linux Security Modules http://lsm.immunix.org http://lsm.bkbits.net