Re: sysctl(7) knob to allow users to control CPU affinity

[Matthew Mondor <mm_lists%pulsar-zone.net@localhost>]

On Thu, 03 Nov 2011 01:50:49 +0100
Jean-Yves Migeon <jym%NetBSD.org@localhost> wrote:

> Here's a proposal for a sysctl(7) knob to easily allow non-superusers to 
> set the CPU affinity of processes and threads they own:
> 
> security.secmodel.suser.usersetaffinity
> 
> (ressembles the one already existing to allow for user mounts)
> 
> Would it be acceptable to modify current secmodel_suser(9) to allow this?
> 
> This issue comes regularly on various tech-* MLs, motivated by the fact 
> that people expect this behavior based on what they encounter on other OS.

Just out of curiosity, but is it possible for the superuser to still
reserve wanted CPU/cores, such that non-privileged users could, if that
sysctl is enabled, work with the non-reserved ones?  Or, can the
sysadmin specify CPU/cores and/or limits for non-privileged users?

Since the default is to not allow affinity control, it's not of utmost
importance, but it could allow a compromise between total restriction
and total freedom...  I have no objection to that sysctl personally.

Thanks,
-- 
Matt