Messages in this thread | | | Date | Thu, 23 Jun 2016 16:46:14 -0700 | From | Andrew Morton <> | Subject | Re: [PATCH] capabilities: add capability cgroup controller |
| |
On Thu, 23 Jun 2016 18:07:10 +0300 Topi Miettinen <toiwoton@gmail.com> wrote:
> There are many basic ways to control processes, including capabilities, > cgroups and resource limits. However, there are far fewer ways to find > out useful values for the limits, except blind trial and error. > > Currently, there is no way to know which capabilities are actually used. > Even the source code is only implicit, in-depth knowledge of each > capability must be used when analyzing a program to judge which > capabilities the program will exercise. > > Add a new cgroup controller for monitoring of capabilities > in the cgroup.
I'm having trouble understanding how valuable this feature is to our users, and that's a rather important thing!
Perhaps it would help if you were to explain your motivation: particular use cases which benefited from this, for example.
| |