Re: [PATCH] [request for inclusion] Realtime LSM

Christoph Hellwig
2005-03-08T04:33:06Z

On Mon, Mar 07, 2005 at 08:28:21PM -0800, Andrew Morton wrote:
> > please describe this "very simple and very real-world problem" in simple
> > terms. Lets make sure "problem" and "solution" didnt become detached.
> >
>
> Well others can do that better than I but I'd describe it as
>
> - Audio apps need to meet their realtime requirements
>
> - The way to implement that is to give them !SCHED_OTHER and mlockall
> capabilities.
>
> - But they don't want to run as root.

Which all fits very nicely with MEMLOCK rlimit and a tiny wrapper
that sets !SCHED_OTHER and execs the audio app..

and as I mentioned a few times if we really want to go for a magic
uid/gid-based approach we should at least have one that's useable for
all capabilities so it can replace the oracle hack aswell. But the
proponents of the patch weren't iterested to invest the tiniest bit
of work over what they submited.