24 Jun
2009
24 Jun
'09
11:55 a.m.
On Tue, Jun 23, 2009 at 4:27 PM, Paul Davis<paul(a)linuxaudiosystems.com> wrote:
here's my halfway (?) summary:
"distros refuse to even provide a way to enable RLIMIT_RTPRIO because
it enables regular users to lockup the machine.
Up next: 8 other ways for regular users to easily lockup the machine ... "
I may be way off base here, but shouldn't SELinux or some sort of
mandatory access control be the mechanism for allowing a user to run a
process with RT scheduling? So the "system administrator" would set a
policy that said "user paul may run the binary /usr/bin/ardour with
SCHED_FIFO" etc.?
There appears to be a LSM hook for both setscheduler and setrlimit.
Why isn't this sufficient for Fedora? PAtch selinux-policy and be
done with it.