Re: [PATCH] Realtime LSM

[Chris Wright]

* Jack O'Quin (joq@xxxxxx) wrote:
> Lee Revell <rlrevell@xxxxxxxxxxx> writes:
> 
> > Another issue that was raised was that the mlock stuff is also
> > unnecessary, because rlimits can do this now.  Is this the case?
> 
> I don't know.  The idea was not explained in enough detail for me to
> understand if it would be simple enough to administer.  Where can I
> find out more?

This uses the basic rlimits infrastructure.  You can manage it manually
in a shell with ulimit -l, or you can use pam (pam_limits) to configure
per uid limits.  There's a pam doc that describes limits, and a manpage
for ulimit.  It's really easy to use, and should eliminate the need for
the mlock part of that module.

thanks,
-chris
-- 
Linux Security Modules     http://lsm.immunix.org     http://lsm.bkbits.net
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/