Re: disable-cap-mlock

Chris Wright
2004-04-02T00:59:58Z

* Andrea Arcangeli (andrea@suse.de) wrote:
> On Thu, Apr 01, 2004 at 06:08:18PM -0500, Rik van Riel wrote:
> > Oracle seems to be using it just fine in a certain 2.4
> > based kernel, so why exactly do you think it would be
> > useless for the problem you want to solve ?
> >
> > Also, what would need to be fixed in order for it to
> > not be useless ? ;)
>
> tell me how to call shmget(SHM_HUGETLB) without having the CAP_IPC_LOCK
> with the rlimit patch.

Account for the equivalent "locked" huge pages on shmget. I did something
like this when porting the mlock patch to 2.6 a month or so ago. I also
recall finding a couple problems along the way, but it's been a while.
I'll dig up what I have and send it in.

thanks,
-chris
--
Linux Security Modules http://lsm.immunix.org http://lsm.bkbits.net