Messages in this thread | | | Date | Mon, 25 Aug 2008 17:55:55 -0700 | From | "Paul Menage" <> | Subject | Re: [RFC] [PATCH -mm] cgroup: uid-based rules to add processes efficiently in the right cgroup |
| |
On Tue, Aug 19, 2008 at 8:12 AM, <righi.andrea@gmail.com> wrote: > > unfortunately I don't have too much details for now, so I was just > looking for the most generic solution. The PAM lib approach seems > reasonable for each daemon that represents an entry point to the > system,
The PAM approach seems like the cleanest solution to me.
> >> due to their "magical" nature - any task that does a setuid() now >> risks being swept off into a different cgroup. > > If the admin configures so, moving tasks that do setuid() in different > cgroups should be an expected behaviour, isn't it?
Is the sysadmin aware of all the places in all system daemons that do setuid() calls?
Paul
| |