Hello,
1/ there already are templates in cgrules.conf - see man pages - (%u, %U, ...),
I will use them for templates control group as was described in the previous
e-mails in this thread
2/ after short discussion with jan, we found the default behaviour of
"template" group, which will be defined by some template in cgrules.conf should
be consistent with the cgconfig.conf default behavior - cgconfig conf creates
parent group of the defined group by plane mkdir - no copy-from-parent.
Thus template cgroup shoud be create by mkdir if there is no specification in
cgconfig.conf as well.
Any ideas?
Ivana
----- Original Message -----
> From: "Dhaval Giani" <dhaval.gi...@gmail.com>
> To: "Ivana Varekova" <varek...@redhat.com>
> Cc: "Balbir Singh" <bsinghar...@gmail.com>, "Jan Safranek"
> <jsafr...@redhat.com>, "Libcg Development list"
> <libcg-devel@lists.sourceforge.net>
> Sent: Sunday, July 29, 2012 7:46:23 PM
> Subject: Re: [Libcg-devel] new feature idea (v2)
>
> On Sun, Jul 29, 2012 at 11:18 AM, Ivana Varekova
> <varek...@redhat.com> wrote:
> > Hello,
> >
> >
> > ----- Original Message -----
> >> From: "Dhaval Giani" <dhaval.gi...@gmail.com>
> >> To: "Ivana Varekova" <varek...@redhat.com>
> >> Cc: "Balbir Singh" <bsinghar...@gmail.com>, "Jan Safranek"
> >> <jsafr...@redhat.com>, "Libcg Development list"
> >> <libcg-devel@lists.sourceforge.net>
> >> Sent: Tuesday, July 24, 2012 6:01:59 PM
> >> Subject: Re: [Libcg-devel] new feature idea (v2)
> >>
> >> On Tue, Jul 24, 2012 at 12:50 AM, Ivana Varekova
> >> <varek...@redhat.com> wrote:
> >> > It seems everybody agrees with this feature.
> >> >
> >> > So I suggest to split it to 2 parts:
> >> > 1/ Add the possibility to set
> >> > @student devices /students/${username}
> >> > in cgrules.conf
> >> > Then if there is not relevant group, it is created based on the
> >> > root group
> >> >
> >>
> >> This is not a good idea. We need a sane default, which in most
> >> cases
> >> is the more conservative option. (This might not be the case
> >> here).
> >>
> >
> > I can't find better default value, do you have any idea which one
> > can be better?
> >
> > The default value depends on the parent group in suggested version.
> > Thus the parent group can be set properly. There can be add some
> > examples to manual page /default cgrules.conf file. .... Probably
> > in majority the user will want to set the groups themselves to
> > have them good for his/her need. There is complicated to find
> > default setting.
> >
>
> Well, no. I think we should as developers think of some sane
> defaults,
> as opposed to defaulting to what the root cgroup has. That is just
> wrong behavior in most cases. (For example, with rt cgroup limits or
> at times with cpusets). The user can always change the values they
> want, but defaulting to what the root cgroup has is just wrong. (It
> might be parent cgroup, which might in most cases imply root cgroup,
> which is fine, but not copying the root cgroup)
>
> >> >
> >> > 2/Add the possibility to use record
> >> > template /students/${username} {
> >> > ...
> >> > }
> >> > in cgconfig.conf.
> >> > This record will be read by cgconfigparser as well but it will
> >> > be
> >> > ignored.
> >> > It will be read if cgroup_change_cgroup_flags does not found
> >> > relevant group for record
> >> > @student devices /students/${username}
> >> > then the group will be added based on this template record.
> >> >
> >>
> >> I prefer a default template, which people can modify.
> >
> > There can be some templates in "#" with some comments??
>
> Without the # :-). It is much preferableto have something that can be
> used immediately.
>
> >>
> >> > Ideas welcomed.
> >>
> >> Do you have any code we can see?
> >
> > If all people agree with the rough idea - new cgrules.conf record
> > and new cgconfig.conf record. I will start to write it. I just wat
> > for the results of this discussion.
> > Thanks for your comments.
>
> I like the idea, maybe you can give an early preliminary version for
> us to see?
>
> Thanks!
> Dhaval
>
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and
threat landscape has changed and how IT managers can respond. Discussions
will include endpoint security, mobile security and the latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Libcg-devel mailing list
Libcg-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/libcg-devel
