diff --git a/dom0/misc/limits-qubes.conf b/dom0/misc/limits-qubes.conf
new file mode 100644
index 00000000..88198a69
--- /dev/null
+++ b/dom0/misc/limits-qubes.conf
@@ -0,0 +1,3 @@
+# xl create needs to allocate and mlock all VM memory
+@qubes  soft    memlock unlimited
+@qubes  hard    memlock unlimited
diff --git a/rpm_spec/core-dom0.spec b/rpm_spec/core-dom0.spec
index 04a46724..1ab2d358 100644
--- a/rpm_spec/core-dom0.spec
+++ b/rpm_spec/core-dom0.spec
@@ -121,6 +121,8 @@ mkdir -p $RPM_BUILD_ROOT/etc/NetworkManager/dispatcher.d/
 cp ../common/qubes_nmhook $RPM_BUILD_ROOT/etc/NetworkManager/dispatcher.d/
 mkdir -p $RPM_BUILD_ROOT/etc/sysconfig
 cp ../common/iptables $RPM_BUILD_ROOT/etc/sysconfig
+mkdir -p $RPM_BUILD_ROOT/etc/security/limits.d
+cp misc/limits-qubes.conf $RPM_BUILD_ROOT/etc/security/limits.d/99-qubes.conf
 
 mkdir -p $RPM_BUILD_ROOT/usr/lib64/pm-utils/sleep.d
 cp pm-utils/01qubes-sync-vms-clock $RPM_BUILD_ROOT/usr/lib64/pm-utils/sleep.d/
@@ -291,3 +293,4 @@ fi
 %{_libdir}/libu2mfn.so
 /etc/sudoers.d/qubes
 /etc/xdg/autostart/qubes-guid.desktop
+/etc/security/limits.d/99-qubes.conf