[lkml]   [1996]   [Sep]   [2]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: enabling mlock for non-root
Robert Bihlmeyer <> writes:
> The max locked-in-memory size is governed by a resource limit
> (RLIMIT_MEMLOCK). The default limit is 4 pages, which should suffice
> for security-applications. RT programs that need more mlock-able
> space, would be run under root anyway, and root, as usual, can raise
> or lower limits ad lib.

There should be a system-wide limit on the total amount of mlock'ed
pages and/or a limit on the total amount of pages that a user can
mlock at any given time. If you do not enforce these limits, then
launching a denial of service attack is possible by forking off lots
of processes that perform mlock. Of course, this is partly remedied by
the limit on the amount of user processess.


 \ /
  Last update: 2005-03-22 13:37    [W:0.031 / U:0.196 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site