On 08/27/2010 05:52 PM, Denis Rizaev wrote:
Hi folks.
I tried to mount cgroup fs in container and was surprised that i can see all
cgroups tree. Also i can modify limits for my container and others!!
In my opinion container should see only it's own level of cgroup, not whole
tree.
Is it
Hi folks.
I tried to mount cgroup fs in container and was surprised that i can see all
cgroups tree. Also i can modify limits for my container and others!!
In my opinion container should see only it's own level of cgroup, not whole
tree.
Is it fundamental design flaw, or i missed something?