Received-SPF: pass (google.com: domain of selinux-refpolicy-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18;
From:   Dominick Grift <dominick.grift@defensec.nl>
To:     Russell Coker <russell@coker.com.au>
Cc:     selinux-refpolicy@vger.kernel.org
Subject: Re: cgroups
References: <201858869.AyTo3W3VYL@liv>
Date:   Thu, 04 Mar 2021 17:47:32 +0100
In-Reply-To: <201858869.AyTo3W3VYL@liv> (Russell Coker's message of "Thu, 04
        Mar 2021 22:21:44 +1100")
Message-ID: <ypjl1rcun9wb.fsf@defensec.nl>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.1 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain
Precedence: bulk

Russell Coker <russell@coker.com.au> writes:

> https://sourceforge.net/projects/libcg/files/
>
> Above seems to be the source for the programs listed in policy/modules/
> services/cgroup.fc, upstream has no changes since 2014 and the package in 
> Debian doesn't support cgroup2 so is pretty much useless.
>
> Is there any reason for not deleting policy/modules/services/cgroup.* from 
> refpolicy?

libgroup is indeed probably history. Although I vaguely recall it still
being used somewhere out there. I wouldnt mind removing it.

>
> Also as an aside what is the best way of managing cgroups and do we have 
> policy that works with it?

I suppose depends who you ask. Many nowayday's will probably say that systemd
should be the only cgroup manager.

On systems with systemd i generally use systemd, one my openwrt powered
router i just use shell and (init)?scripts

-- 
gpg --locate-keys dominick.grift@defensec.nl
Key fingerprint = FCD2 3660 5D6B 9D27 7FC6  E0FF DA7E 521F 10F6 4098
https://sks-keyservers.net/pks/lookup?op=get&search=0xDA7E521F10F64098
Dominick Grift