On Fri, May 29, 2009 at 11:10:20AM +0900, Ken'ichi Ohmichi wrote: > > Hi Dhaval and KAMEZAWA-san, > > Dhaval Giani wrote: > >>>> I have no strong opinion but I feel only "comm" can be too short for > >>>> enterprise users. I saw 3 version of "java" runs under different > >>>> applications > >>>> in user's environment, all uid were "root". (oh, yes, seems crazy ;) > >>>> > >>> True, but I think we need to keep the configuration file as simple as > >>> possible for it to be useful. > >> I have a little headache, and I'd like to clarify some requests. > >> > >> 1) Handle a shell process by a rule based on shell name. (KAMEZAWA) > >> 2) Handle a process by a rule based on full path of command. (KAMEZAWA) > >> 3) Keep the configuration file as simple as possible. (Dhaval) > >> > > > > Actually, you can drop 3 as a requirement as long as you provide some > > tool as well which will allow these configuration files to be formed. > > How about the following rule ? > > NEW RULE (/etc/cgrules.conf): > ============================= > EXISTING) <user> <controllers> <destination> > NEW1) <user>:<process name> <controllers> <destination> > NEW2) <user>:<full path of command> <controllers> <destination> > > I add NEW2 rule and the example is : > root:/bin/cp cpuset group01 > > I feel we can get the full path of both a command and shell script name > by the following logic. > > 1) Get a process name from /proc/<pid>/status. > 2) Get the full path from the link destination of /proc/<pid>/exe. > 2.1) If the basename of the name 2) matches the name 1), the name 2) > is the full path of a process. > (We should take care of the length of the name 1).) > 2.2) If not (almost shell script), get the full path from both > /proc/<pid>/cmdline and the link destination of /proc/<pid>/cwd. >
I'm not sure if the script option is a good idea or not. The script is going to fork another task which will anyway get classified right? thanks, -- regards, Dhaval ------------------------------------------------------------------------------ Register Now for Creativity and Technology (CaT), June 3rd, NYC. CaT is a gathering of tech-side developers & brand creativity professionals. Meet the minds behind Google Creative Lab, Visual Complexity, Processing, & iPhoneDevCamp as they present alongside digital heavyweights like Barbarian Group, R/GA, & Big Spaceship. http://p.sf.net/sfu/creativitycat-com _______________________________________________ Libcg-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/libcg-devel
