It looks like the otpclient package could change the default maximum 
memlock for all users by installing a config file in /etc/systemd/
user.conf.d.

There are two memlock values, one for root and one for other users.  
The current value for root can be read from /proc/1/limits.  On my 
system it is:

Limit               Soft Limit     Hard Limit     Units     
Max locked memory   8109957120     8109957120     bytes

The current value for a non-root user can be read from /proc/2/limits.  
On my system it is:

Limit               Soft Limit     Hard Limit     Units     
Max locked memory   8388608        8388608        bytes

The values for these can be changed in the files /etc/systemd/
system.conf and /etc/systemd/user.conf and in the directories /etc/
systemd/system.conf.d and /etc/systemd/user.conf.d.

[Manager]
#DefaultLimitMEMLOCK=8M

This would change the value for all users on the system.  Although as 
mentioned in the following bug report, there is probably no difficulty 
in doing so, it might be worth asking the systemd maintainer if they 
think there would be an issue with an override.

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1103856

For the sake of completeness, this value is set by the Linux kernel, 
can be reset by systemd, and can also be overwritten by pam for 
particular groups using /etc/security/limits.conf, which is shipped in 
libpam-modules.  In the past, pam used to override this value by 
default, but recently stopped doing so.

-- 
Soren Stoutner
so...@debian.org

Attachment: signature.asc
Description: This is a digitally signed message part.

Reply via email to