I note that SUSE have included the Capability LSM in their kernel as I
get "linux kernel: Capability LSM initialized" in the log file, but I
don't know whether this means:
- the realtime functionality just needs to be configured
- I need to build and install a separate realtime module, or
- I need to build or otherwise obtain a kernel specifically built
for realtime support
If at all possible, I'd like to do it without rebuilding the kernel
myself, but if I need to, I would be so grateful to hear from someone
who's already succeeded with this on SuSE 9.3.
I have SuSE 9.3 here on my P4/HT desktop box, which is running
2.6.11.4-20a tagged kernel. The way to go is installing kernel-source
package and apply the realtime-lsm patch to the kernel source tree. The
patch is here:
http://www.kernel.org/pub/linux/kernel/people/akpm/patches/2.6/2.6.12-rc4/2…
Just (re)build and install the patched kernel, but take special care to
set the following, while on kernel configuration:
CONFIG_SECURITY_CAPABILITIES=N
CONFIG_SECURITY_REALTIME=M
To load the realtime module at init, I added the following lines to
/etc/init.d/boot.local:
# Realtime LSM name.
RTLSM=realtime
# Realtime group name.
RTGRP=audio
# Realtime LSM capabilities enabling module.
RTGID=`cat /etc/group | grep "^${RTGRP}:" | awk -F: '{print $3}'`
if [ -n "`modprobe -l ${RTLSM}`" ]; then
/sbin/modprobe ${RTLSM} gid=${RTGID} mlock=1
fi
Which boils down to this literal one, if you prefer the "hackish"-way :)
/sbin/modprobe realtime gid=17 mlock=1
Good luck.
--
rncbc aka Rui Nuno Capela
rncbc(a)rncbc.org