From c51611c27f766bb4f413485bf8a12bca02e98669 Mon Sep 17 00:00:00 2001 From: Dimitri Staessens Date: Sun, 18 Jan 2026 14:35:50 +0100 Subject: lib: Call mlock() on the shared memory buffers This prevents them from swapping to disk and killing performance. It also enhances security a little bit by reducing the risk of sensitive (even encrypted) data being paged out and captured. Signed-off-by: Dimitri Staessens Signed-off-by: Sander Vrijders --- src/lib/shm_rbuff.c | 7 +++++++ 1 file changed, 7 insertions(+) (limited to 'src/lib/shm_rbuff.c') diff --git a/src/lib/shm_rbuff.c b/src/lib/shm_rbuff.c index ec3bd152..ce432efb 100644 --- a/src/lib/shm_rbuff.c +++ b/src/lib/shm_rbuff.c @@ -455,3 +455,10 @@ size_t shm_rbuff_queued(struct shm_rbuff * rb) return ret; } + +int shm_rbuff_mlock(struct shm_rbuff * rb) +{ + assert(rb != NULL); + + return mlock(rb->shm_base, SHM_RBUFF_FILESIZE); +} -- cgit v1.2.3