>Right. I still have not seen any code in mlockall() that actually >checks CAP_SYS_RESOURCE. But, he and I both tried running jackstart >without it an found that mlockall() failed (with EPERM, IIRC). did you check glibc?