> Should we skip the RLIMIT_MEMLOCK check if capable(CAP_IPC_LOCK)?
FWIW I don't think we should. They are not really related.
The original version was much smaller -- a lot of the increase came out of
review feedback for "more infrastructure" etc. I don't think you can blame
Markus for that.
-Andi
--