Re: [patch] mlock-as-nonroot revisted

From: William Lee Irwin III
Date: Tue Aug 03 2004 - 21:03:07 EST


On Tue, Aug 03, 2004 at 05:31:08PM -0400, Rik van Riel wrote:
>> If root wants to screw over a user, there's nothing we
>> can do. I am not worried about the scenario you describe
>> because hugetlbfs seems to be used only by Oracle anyway,
>> so you won't run into issues like you describe.

On Tue, Aug 03, 2004 at 11:39:42PM +0200, Andrea Arcangeli wrote:
> hugetlbfs isn't only used by oracle. Anyways if you were right then why
> is there a IPC_CAP_LOCK in hugetlbfs in the first place? If Oracle is
> the only user then just drop such check and stop binding rlimits to
> persistent fs objects.

Excellent. It appears the check for the ability to mlock is now
checking the amount of memory to be locked.


-- wli
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/