Talk:Realtime process management
Removing "Power is nothing without control"
This section currently reads as follows:
- The realtime-lsm module granted the right to get higher capabilities to users belonging to a certain UID. The rlimit way works similar, but it can be controlled graduated finer. There is a new functionality in PAM which can be used to control the capabilities on a per user or a per group level. In the current version (0.80-2) these values are not set correctly out of the box and still create problems.
- With PAM you can grant realtime priority to a certain user or to a certain user group. PAM's concept makes it imaginable that there will be ways in the future to grant rights on a per application level; however, this is not yet possible.
This section was introduced when the page was created in 2005. However, it doesn't reference any sources or have clear instructions or explanations for alternative approaches. As far as I can tell realtime-lsm was last updated in 2015 and the Gentoo wiki has a warning that it doesn't work any more
- Since Linux kernel version 2.6.24 this is no longer an option, as capabilities can't be built into a module, and external security modules can't be compiled anymore. This option is still documented for older versions of the kernel, for people not using PAM, but it cannot be supported anymore.
As it is written today, this section confuses new readers. I think all relevant content is already covered in other sections these days:
- rlimit is covered in the Configuration section through a reference to limits.conf
- PAM is also covered in the Configuration and further expanded upon in "Tips and tricks"
- Removing a reference to speculative per-application control seems fine.
I'll make this a single edit so you can easily revert if you think this section should be improved instead of removed. Javex (talk) 12:16, 10 June 2025 (UTC)
Updated Tips and tricks
This section was outdated as far as I can tell. I believe the issues described in that section (the reason for writing it in the first place) are no longer relevant on modern installations, so I rewrote it to clarify that the distinction between graphical & console login is no longer needed and instead focus on how users can investigate their configuration.
Since this section was also the main reason for the style note, I have removed it as I believe it isn't relevant any more, but please add it back or let me know if I wasn't supposed to do that.
I've also added a small section on how to check limits since I thought it would be helpful for anyone who is following the instructions but isn't sure if it's working. Javex (talk) 13:17, 10 June 2025 (UTC)