FW: jackd/ audio apps mini policy

[Zenaan Harkness]

FYI

From: Matthias Urlichs
> Hi, Jack O'Quin wrote:
> 
> > So far, no one is sure why CAP_SYS_RESOURCE is needed, but we find
> > that mlockall() fails without it.
> 
> For good reason. The resource in question is physical memory. You could
> lock all the free memory with this program (thereby condemning it to swap
> death) if you're not VERY careful.