Since
mainstream capabilities support seems always to be somewhere
over the horizon, I am interested in the patch Paul and Steve
mentioned. IIUC, it defines a control file in /proc which, if
enabled, allows any process access to scheduling and memory locking
privileges. No other capabilities are provided. I would love to see
a copy of this patch to study exactly what it does.
its a very simple patch, IIRC. it just short-circuits the checks on
uid==0 and/or capabilities when assigning SCHED_FIFO and/or locking
memory.
i'm looking for it in my archives. i'm a bit worried i may have
I couldn't wait til you found it, so I wrote one from scratch instead. :)
The url below point to a hackish patch againt 2.4.23-rc1, and yes, it is
very simple. Works by setting /proc/sys/kernel/setschedandmlock to 1.