Allow small amount of memory be mlock()'ed by unprivileged process?

[Christoph Hellwig]

On Wed, May 16, 2012 at 06:36:18PM -0400, Eitan Adler wrote:
> On 16 May 2012 18:32, Adrian Chadd <adrian at freebsd.org> wrote:
> > .. what's to stop a fork() bomb from grabbing all pages?
> 
> <quote>+ possibly limiting the number of pages per user, ?? la
> maxprocperuid.</quote>

Linux has added a RLIMIT_MEMLOCK opcode for setrlimit that allows
controlling the amount of memory users can lock down, with a default
of a single page for unprivilegued processes.