tech-kern archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: sysctl(7) knob to allow users to control CPU affinity

On Thu, 03 Nov 2011 01:50:49 +0100
Jean-Yves Migeon <> wrote:

> Here's a proposal for a sysctl(7) knob to easily allow non-superusers to 
> set the CPU affinity of processes and threads they own:
> security.secmodel.suser.usersetaffinity
> (ressembles the one already existing to allow for user mounts)
> Would it be acceptable to modify current secmodel_suser(9) to allow this?
> This issue comes regularly on various tech-* MLs, motivated by the fact 
> that people expect this behavior based on what they encounter on other OS.

Just out of curiosity, but is it possible for the superuser to still
reserve wanted CPU/cores, such that non-privileged users could, if that
sysctl is enabled, work with the non-reserved ones?  Or, can the
sysadmin specify CPU/cores and/or limits for non-privileged users?

Since the default is to not allow affinity control, it's not of utmost
importance, but it could allow a compromise between total restriction
and total freedom...  I have no objection to that sysctl personally.


Home | Main Index | Thread Index | Old Index