Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1754048AbZFEKC7 (ORCPT ); Fri, 5 Jun 2009 06:02:59 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1754498AbZFEKCs (ORCPT ); Fri, 5 Jun 2009 06:02:48 -0400 Received: from smtp-out.google.com ([216.239.45.13]:15071 "EHLO smtp-out.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1754793AbZFEKCr (ORCPT ); Fri, 5 Jun 2009 06:02:47 -0400 DomainKey-Signature: a=rsa-sha1; s=beta; d=google.com; c=nofws; q=dns; h=mime-version:in-reply-to:references:date:message-id:subject:from:to: cc:content-type:content-transfer-encoding:x-system-of-record; b=TI5YMUA9+Dc97u9ThkA3+apu8nWMLPK+GV8BZdpPyLvhdlcuOEUCSBpxNk+eRXFK8 tf3kSFV3MhvGNzZc8iMDQ== MIME-Version: 1.0 In-Reply-To: <20090605095527.GM11755@balbir.in.ibm.com> References: <20090604053649.GA3701@in.ibm.com> <6599ad830906050153i1afd104fqe70f681317349142@mail.gmail.com> <20090605093625.GI11755@balbir.in.ibm.com> <6599ad830906050248m2c569e5bx44fb3bbddf46f8b1@mail.gmail.com> <20090605095527.GM11755@balbir.in.ibm.com> Date: Fri, 5 Jun 2009 03:02:46 -0700 Message-ID: <6599ad830906050302v70c54e7cu89a52d57f9fe72e6@mail.gmail.com> Subject: Re: [RFC] CPU hard limits From: Paul Menage To: balbir@linux.vnet.ibm.com Cc: bharata@linux.vnet.ibm.com, linux-kernel@vger.kernel.org, Dhaval Giani , Vaidyanathan Srinivasan , Gautham R Shenoy , Srivatsa Vaddagiri , Ingo Molnar , Peter Zijlstra , Pavel Emelyanov , Avi Kivity , kvm@vger.kernel.org, Linux Containers , Herbert Poetzl Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-System-Of-Record: true Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 826 Lines: 18 On Fri, Jun 5, 2009 at 2:55 AM, Balbir Singh wrote: > > What about applications running as root, that can create their own > groups? How about multiple instances of the same application started? > Do applications need to know that creating a group will hurt > guarantees provided to others? Yes, of course. If you're handing out guarantees, but other users can/will create cgroups with whatever parameters they like and won't respect the guarantees that you've made, then those guarantees are worthless. How do hard limits help in that situation? Paul -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/