On Wed, 2014-10-15 at 09:52 +0200, Svante Signell wrote: > Hi, > > Currently libgnome-keyring and gnome-keyring secmem related tests fail, > falling back to mlock/munlock requiring root permissions to lock > memory. > In the code we have: > err = __get_privileged_ports (&hostpriv, NULL); > if (err) > return __hurd_fail (EPERM); > > How to make mock/munlock available to the user (process owner), not only > root? It seems that POSIX allows both root-only and non-root. > http://pubs.opengroup.org/onlinepubs/9699919799/functions/mlock.html > "Appropriate privileges are required to lock process memory with > mlock()." > > Linux has a non-root implementation and kFreeBSD is moving towards one > in kernel 10.x, see https://bugs.debian.org/628383
See also https://lists.debian.org/debian-devel/2014/10/msg00201.html for a discussion on the topic.