Re: fw: jackd/ audio apps mini policy

[Matthias Urlichs <smurf@smurf.noris.de>]

Hi, Jack O'Quin wrote:

> So far, no one is sure why CAP_SYS_RESOURCE is needed, but we find
> that mlockall() fails without it.

For good reason. The resource in question is physical memory. You could
lock all the free memory with this program (thereby condemning it to swap
death) if you're not VERY careful.

-- 
Matthias Urlichs   |   {M:U} IT Design @ m-u-it.de   |  smurf@smurf.noris.de
Disclaimer: The quote was selected randomly. Really. | http://smurf.noris.de
 - -
FIVE DAYS IS NOT TOO LONG TO WAIT FOR A GUN
		-- Bart Simpson on chalkboard in episode 1F20