[lkml]   [2005]   [Mar]   [8]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: [PATCH] [request for inclusion] Realtime LSM
    * Peter Williams ( wrote:
    > Andrew Morton wrote:
    > >Matt Mackall <> wrote:
    > >
    > >>I think Chris Wright's last rlimit patch is more sensible and ready to
    > >>go.
    > >
    > >
    > >I must say that I like rlimits - very straightforward, although somewhat
    > >awkward to use from userspace due to shortsighted shell design.
    > >
    > >Does anyone have serious objections to this approach?
    > I don't object to rlimits per se and I think that they are useful but
    > not as a sole solution to this problem. Being able to give a task
    > preferential treatment is a permissions issue and should be solved as one.
    > Having RT cpu usage limits on tasks is a useful tool to have when
    > granting normal users the privilege of running tasks as RT tasks so that
    > you can limit the damage that they can do BUT the presence of a limit on
    > a task is not a very good criterion for granting that privilege.
    > The granting of the ability to switch to and from RT mode should require
    > a means to specify which users it applies to and also which programs it
    > applies to. The RT rlimits mechanism doesn't meet these criteria.
    > In summary, IMHO you should put them both in but modify the RT rlimits
    > patch so that it plays no part in the decision as to whether the task is
    > allowed to run as RT or not.

    I'm not sure I follow you. This patch just sets the max RT priority a
    process can have (defaults to 0, as w/out the patch). Increasing that
    value is a form of permission granting, giving the process the ability
    to increase its RT prio if it chooses to ask for it.

    Linux Security Modules
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to
    More majordomo info at
    Please read the FAQ at

     \ /
      Last update: 2005-03-22 14:10    [W:0.022 / U:0.372 seconds]
    ©2003-2017 Jasper Spaans. hosted at Digital OceanAdvertise on this site