Hi Balbir,

On Fri, 17 Sep 2010 12:11:41 +0530
Balbir Singh <[email protected]> wrote:
> > On current libcgroup, if a user registers the unchanged process
> > to cgrulesengd daemon by "--sticky" option of cgexec/cgclassify,
> > he/she cannot cancel it after.
> > This patchset is for doing it.
> >
> 
> Are you talking about tasks always running that were indeed started
> with cgexec -sticky? Is this a common scenario we face? 

I feel it is common to specify "--sticky" of cgexec command.
For example, Jan showed the scenario on the attached mail.


Thanks
Ken'ichi Ohmichi

-----------------------------------------------------------------------
Re: [Libcg-devel] [PATCH-v3 0/9] Add a new rule based on process name.
2009/06/12 23:18
Jan Safranek
-----------------------------------------------------------------------

I have just one qeustion, how is cgexec (and potentially cgclassify)
supposed to work? If I execute e.g. an daemon as root:

  cgexec -g cpu:my_group /usr/bin/my_daemon

The daemon allocates resources (listening sockets, ...) and then changes
its UID to e.g. daemon_uid. I have cgrulesengd running and I have rule:

  daemon_uid cpu another_group

Now, should cgrulesengd move the my_daemon to new group or not?
I can imagine situation when this is not wanted, e.g. in the apache case
- my_daemon should not leave group specified at cgexec command line.

But I can also imagine other use cases - e.g. sshd daemon accepts new
connection and starts new session with new user. Now I would expect that
the new session is moved to user's default group. (assume I am lazy to
configure the cgroup PAM module)

Should there be an argument to cgexec/cgclassify to state, how 'sticky'
the specified group should be?

-----------------------------------------------------------------------

------------------------------------------------------------------------------
Start uncovering the many advantages of virtual appliances
and start using them to simplify application deployment and
accelerate your shift to cloud computing.
http://p.sf.net/sfu/novell-sfdev2dev
_______________________________________________
Libcg-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/libcg-devel

Reply via email to