Re: 2.5.74-mm1

Alex Riesen
2003-07-07T12:54:41Z

Daniel Phillips, Mon, Jul 07, 2003 14:24:06 +0200:
> > Alternatively, how about using PAM to grant the CAP_SYS_NICE capability to
> > known interactive users that require it. Presumably the number of users
> > that require it is very small (in the case of the music player, only one)
> > so it wouldn't be a major security issue.
>
> And set up distros to grant it by default. Yes.
>
> The problem I see is that it lets user space priorities invade the range of
> priorities used by root processes. What's really needed is a range of
> negative priorities available to normal users that are not normally used by
> root.
>
> In retrospect, the idea of renicing all the applications but the
> realtime one doesn't work, because it doesn't take care of
> applications started afterwards.
>

start login niced to -X ?