On Thu, Mar 25, 2004 at 07:32:02PM +0000, James Stone wrote:
> On Thu, Mar 25, 2004 at 09:41:55AM -0600, Jack O'Quin wrote:
> > Robert Jonsson <robert.jonsson@xxxxxxxxxxxxx> writes:
> > > > Yep.. its 0.6.3 and jack is run through qjackctl with realtime option.
> > > > Muse is compiled with rtcap so it is not suid (thought it was safer..)
> > > > but if I do change it to suid and then start with -R, it starts okay
> > > > with no error messages...?? Maybe rtcap does not enable enough realtime
> > > > capabilities!!?
> > > This is a possibility, it's a bug in that case, I have a vague memory of
> > > something similar being reported some time ago.
> > Have you tried using the realtime LSM instead of rtcap? I think it
> > ought to work, but haven't tested it with Muse, myself. That is safer
> > than setuid root, IMHO.
> Does the realtime LSM work with 2.4.x kernels ('cos thats what I'm using)?
>
> James
You need the security module infrastructure which is included in the
2.6.x series. There is a large patchset (from the NSA's SE-linux project)
that provides this for the 2.4.x kernel. But, I don't know of anyone who
is using the realtime lsm that way. (I haven't been following the lists
closely for the past couple of weeks, so I may have missed something.)
-Eric Rz.
