6 Jun
2005
6 Jun
'05
11:23 p.m.
Your group support is not very useful, yet, because it
only checks the
current group.
True, but group support wasn't really my prime objective at this point in
time (see below). Your program is quite useful and timely. Given the
difficulty of
patching and then configuring PAM, I expect very few users to use the
new rlimits effectively until those changes have percolated down into
widely-available distributions.
Indeed, and there are some which won't use PAM at all.
My comments were intended to encourage further
development of this
useful program, not to come across as harsh and critical.
No problem - sorry if I came across as annoyed. Constructive comments and
suggestions are always welcome.
Another thing I'm pondering is adding support for setting the memlock limit
for selected binaries; this way a user doesn't have to be granted large
memlock limits in general just so they can run one or two apps which need
it. If this happens I might rename set_rtlimits to set_rlimits since this
change would make it more general than just dealing with realtime limits.
Would this be useful for people?
Best regards
jonathan