lib: Call mlock() on the shared memory buffers

This prevents them from swapping to disk and killing performance. It
also enhances security a little bit by reducing the risk of sensitive
(even encrypted) data being paged out and captured.

Signed-off-by: Dimitri Staessens <dimitri@ouroboros.rocks>
Signed-off-by: Sander Vrijders <sander@ouroboros.rocks>

1 files changed, 7 insertions, 0 deletions

diff --git a/src/lib/shm_rbuff.c b/src/lib/shm_rbuff.c
index ec3bd152..ce432efb 100644
--- a/src/lib/shm_rbuff.c
+++ b/src/lib/shm_rbuff.c
@@ -455,3 +455,10 @@ size_t shm_rbuff_queued(struct shm_rbuff * rb)
 
         return ret;
 }
+
+int shm_rbuff_mlock(struct shm_rbuff * rb)
+{
+        assert(rb != NULL);
+
+        return mlock(rb->shm_base, SHM_RBUFF_FILESIZE);
+}