FYI From: Matthias Urlichs > Hi, Jack O'Quin wrote: > > > So far, no one is sure why CAP_SYS_RESOURCE is needed, but we find > > that mlockall() fails without it. > > For good reason. The resource in question is physical memory. You could > lock all the free memory with this program (thereby condemning it to swap > death) if you're not VERY careful.