[PlanetCCRMA] Problem with qjackctl in Fedora 14

[David Cornette]

On Wed, Dec 29, 2010 at 11:48:36AM -0800, Fernando Lopez-Lezcano wrote:
> You can add this file (name it "90-jack.conf") to the 
> /etc/security/limits.d/:
> 
> ---- CUT HERE
> # Planet CCRMA, jack-audio-connection-kit
> #
> # Allow processes access to rt priority and memory locking
> # without limits, needed by the rt kernel and jackd
> *	-	rtprio	99
> *	-	memlock	4194304
> -- CUT HERE
> 
> This will allow all users to use the full range of priorities for 
> realtime scheduling. This is (as has been pointed out before) the most 
> secure option.

How is this the most secure option?  For most people here, who have single user, dedicated machines used for audio (at least I am guessing that is the most typical use case), it won't make any difference, but isn't it generally considered more secure to limit the permissions for real time capabilities so a malicious user can't lock up the machine?  It is simplest, though.

> 
> I have to see what is the best solution for this long term (probably an 
> additional package in the Planet CCRMA repository)...
> 

Why not put the limits.conf stuff in the rtirq package?  Isn't it the one that really needs to be able to set the priorities to the high values?