Re: gnome-keyring Quantifying non-pageable memory and expanding if necessary

[Stef Walter <stefw gnome org>]

On 2010-10-13 04:42, Yaron Sheffer wrote:
>  Hi Stef,
> 
> it looks like the allocation of locked pages is governed by a specific
> process capability: CAP_IPC_LOCK. Capabilities can be set on the
> executable at install time:
> 
> sudo setcap CAP_IPC_LOCK+ep <file>
> 
> Maybe setting this flag on the demon at install time will solve the
> problem (you do NOT have to be fully privileged). Note that this
> mechanism is very OS/version specific. I tried it successfully on the
> attached piece of code.

Interesting. So we would set this during install, and then make note for
distributors to try and keep this somehow? But I'm not sure how well
these caps work in tarballs and packages (ie: debs and rpms).

Thanks for discovering this, but is there a second solution?

Cheers,

Stef