On Sun, Jul 29, 2012 at 11:18 AM, Ivana Varekova <varek...@redhat.com> wrote:
> Hello,
>
>
> ----- Original Message -----
>> From: "Dhaval Giani" <dhaval.gi...@gmail.com>
>> To: "Ivana Varekova" <varek...@redhat.com>
>> Cc: "Balbir Singh" <bsinghar...@gmail.com>, "Jan Safranek"
>> <jsafr...@redhat.com>, "Libcg Development list"
>> <libcg-devel@lists.sourceforge.net>
>> Sent: Tuesday, July 24, 2012 6:01:59 PM
>> Subject: Re: [Libcg-devel] new feature idea (v2)
>>
>> On Tue, Jul 24, 2012 at 12:50 AM, Ivana Varekova
>> <varek...@redhat.com> wrote:
>> > It seems everybody agrees with this feature.
>> >
>> > So I suggest to split it to 2 parts:
>> > 1/ Add the possibility to set
>> > @student devices /students/${username}
>> > in cgrules.conf
>> > Then if there is not relevant group, it is created based on the
>> > root group
>> >
>>
>> This is not a good idea. We need a sane default, which in most cases
>> is the more conservative option. (This might not be the case here).
>>
>
> I can't find better default value, do you have any idea which one can be
> better?
>
> The default value depends on the parent group in suggested version. Thus the
> parent group can be set properly. There can be add some examples to manual
> page /default cgrules.conf file. .... Probably in majority the user will want
> to set the groups themselves to have them good for his/her need. There is
> complicated to find default setting.
>
Well, no. I think we should as developers think of some sane defaults,
as opposed to defaulting to what the root cgroup has. That is just
wrong behavior in most cases. (For example, with rt cgroup limits or
at times with cpusets). The user can always change the values they
want, but defaulting to what the root cgroup has is just wrong. (It
might be parent cgroup, which might in most cases imply root cgroup,
which is fine, but not copying the root cgroup)
>> >
>> > 2/Add the possibility to use record
>> > template /students/${username} {
>> > ...
>> > }
>> > in cgconfig.conf.
>> > This record will be read by cgconfigparser as well but it will be
>> > ignored.
>> > It will be read if cgroup_change_cgroup_flags does not found
>> > relevant group for record
>> > @student devices /students/${username}
>> > then the group will be added based on this template record.
>> >
>>
>> I prefer a default template, which people can modify.
>
> There can be some templates in "#" with some comments??
Without the # :-). It is much preferableto have something that can be
used immediately.
>>
>> > Ideas welcomed.
>>
>> Do you have any code we can see?
>
> If all people agree with the rough idea - new cgrules.conf record and new
> cgconfig.conf record. I will start to write it. I just wat for the results of
> this discussion.
> Thanks for your comments.
I like the idea, maybe you can give an early preliminary version for us to see?
Thanks!
Dhaval
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and
threat landscape has changed and how IT managers can respond. Discussions
will include endpoint security, mobile security and the latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Libcg-devel mailing list
Libcg-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/libcg-devel
