The realtime Linux Security Module is an installable kernel module that enables realtime capabilities for any 2.6 kernel without needing to directly patch the kernel. It was originally written by Torben Hohn and Jack O'Quin, who make no warranty concerning the safety, security or even stability of your system when using it. It is provided under the provisions of the GPL. We are preparing a new version of this LSM for inclusion in an upcoming 2.6.x kernel version. Special thanks to Jody McIntyre and Chris Wright for many improvements to the LSM, and to Lee Revell for patiently shepherding it through the kernel patch acceptance process. No one *needs* to use this new version, the older ones work fine. But it would help for some of you to download a beta version and try it out. Two test files are available, use either one. The first is a tarball[1] for building stand-alone, like previous LSM releases. This version no longer supports kernels earlier than 2.6.4. The second is a patch[2] for the current (2.6.10-rc1-mm2) development kernel. This patch should apply cleanly against any recent kernel since 2.6.9-mm1, and should work with some earlier ones with a little fiddling. [1] http://www.joq.us/realtime/realtime-lsm-0.8.3.tar.gz [2] http://www.joq.us/realtime/linux-2.6.10-rc1-mm2-rt2.patch.gz There are some small changes to the user interface. (*) The `allcaps' option is no longer supported. It was an unnecessary security exposure to include in standard kernel sources. Consequently, you will not be able to use the `jackstart' command with this version, unless you are running a recent CVS version of JACK (>=0.99.2). There is really no need for `jackstart' with realtime-lsm, invoking `jackd' directly works fine. (*) Recent kernels (>=2.6.9-mm1) externalize module parameters in sysfs. With this feature, realtime-lsm options can be queried and set via files in /sys/module/realtime/parameters, each named after the corresponding parameter (any, gid, mlock). Please report directly to me (i.e. mostly off-list) any problems or successes you have with this version. Thanks, -- joq
