diff --git a/sysdeps/mach/hurd/mlock.c b/sysdeps/mach/hurd/mlock.c
index 14c311c..927c9e8 100644
--- a/sysdeps/mach/hurd/mlock.c
+++ b/sysdeps/mach/hurd/mlock.c
@@ -32,12 +32,18 @@ mlock (const void *addr, size_t len)
   vm_address_t page;
   error_t err;
 
+  page = trunc_page ((vm_address_t) addr);
+  len = round_page ((vm_address_t) addr + len) - page;
+
   err = __get_privileged_ports (&hostpriv, NULL);
   if (err)
-    return __hurd_fail (EPERM);
+    {
+      err = __vm_task_wire (__mach_task_self (), page, len, VM_PROT_READ);
+      if (err == EMIG_BAD_ID)
+	err = EPERM;
+      return err ? __hurd_fail (err) : 0;
+    }
 
-  page = trunc_page ((vm_address_t) addr);
-  len = round_page ((vm_address_t) addr + len) - page;
   err = __vm_wire (hostpriv, __mach_task_self (), page, len,
 		   VM_PROT_READ);
   __mach_port_deallocate (__mach_task_self (), hostpriv);
diff --git a/sysdeps/mach/hurd/munlock.c b/sysdeps/mach/hurd/munlock.c
index c03af90..5a47f1d 100644
--- a/sysdeps/mach/hurd/munlock.c
+++ b/sysdeps/mach/hurd/munlock.c
@@ -31,12 +31,18 @@ munlock (const void *addr, size_t len)
   vm_address_t page;
   error_t err;
 
+  page = trunc_page ((vm_address_t) addr);
+  len = round_page ((vm_address_t) addr + len) - page;
+
   err = __get_privileged_ports (&hostpriv, NULL);
   if (err)
-    return __hurd_fail (EPERM);
+    {
+      err = __vm_task_wire (__mach_task_self (), page, len, VM_PROT_NONE);
+      if (err == EMIG_BAD_ID)
+	err = EPERM;
+      return err ? __hurd_fail (err) : 0;
+    }
 
-  page = trunc_page ((vm_address_t) addr);
-  len = round_page ((vm_address_t) addr + len) - page;
   err = __vm_wire (hostpriv, __mach_task_self (), page, len, VM_PROT_NONE);
   __mach_port_deallocate (__mach_task_self (), hostpriv);