![]() | |||||||||||||
Messages in this thread |
Christoph Hellwig <hch@infradead.org> wrote: > > > Capabilities are broken and don't work. Nobody has a clue how to provide > > the required services with SELinux and nobody has any code and we need the > > feature *now* before vendors go shipping even more ghastly stuff. > > The thing is special privilegues for a group don't fit into any of the > various privilegues schemes we have (capabilities, selinux, etc..), > it's really a horrible hack. It beats the alternatives which are floating about, which includes a sysctl which defeats CAP_SYS_MLOCK system-wide. > What happened to the patch rick promised > to make mlock an rlimit? This is the right approach and could be easily > extended to hugetlb pages. rlimits don't work for this. shm segments persist after process exit and aren't associated with a particular user. - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/ | ||||||||||||
| Last update: 2005-03-22 13:03 [from the cache] ©2003-2008 | |||||||||||||