Subject: Re: [linux-audio-user] running jack as non-root?
From: Jack O'Quin (joq_AT_io.com)
Date: Sun Mar 07 2004 - 06:45:31 EET
lee_AT_fallingforward.net writes:
> I'm a little behind with my email. Just read this. I find editing kernel
> hearder quite a hardcore solution to not running as root. Are there any OS
> X Core Audio developers on this list who know how Apple does it?
> Appearently all apps that need to run in realtime regardless of the user.
OSX grants all processes realtime privileges whether they need them or
not. For a DAW, that is probably fine. For a server it's not so hot.
I suspect it leaves their system wide open to certain kinds of Denial
of Service attacks.
The realtime LSM for 2.6 kernels can do this if you want. It also
offers some more secure options, such as granting realtime privileges
to all members of some group ID (like `audio').
-- joq
This archive was generated by hypermail 2b28 : Sun Mar 07 2004 - 06:43:01 EET