Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> A static list of required capabilities in some ELF header would probably be better.

I think I agree, the thing is that it's a kind-of security issue. I suggested pinning, because it requires CAP_SYS_NICE, which is a feature: If you allow apps to freely declare their usage, they will end up being scheduled not fairly, because system will stick them to P cores.

That being said, you could have indeed an ELF header mentioning since, and then ignore it if caller doesn't have CAP_SYS_NICE. I do feel using an ELF header for that is weird, but my knowledge of ELF is way too little to judge.

Another thing that could work is using file-system attributes or mode (like setuid), but I think FS support of attributes is at best spotty, and I doubt modes can be extended.



I don't think sched_setaffinity requires CAP_SYS_NICE unless you want to set it on a process you don't own.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: