Closing this bug as notabug.
In rhel 6, corosync is executed by cman. Cman always executes corosync with -f parameter, so mlock is set correctly (you can test it by running grep VmLck /proc/`pidof corosync`/task/*/status). Running corosync standalone (without cman) is not supported.