30 Jun
2011
30 Jun
'11
1:02 p.m.
On 6/30/11, rainer@ultra-secure.de rainer@ultra-secure.de wrote:
Unfortunately, all this does not matter at all. The problem is: sshd is swapped out and the system needs to swap-out something else first, before it can take sshd back in.
There appears to be some functions available to programs to lock their process pages in memory, mlock and mlockall. But I can't seem to find a command line equivalent that might be able to keep sshd locked into memory.
In any case, I've ionice and renice sshd and see if that would help.