On Tue, 16 Oct 2012, Glauber Costa wrote: > A limitation of kernel memory use would be good, for example, to prevent > abuse from non-trusted containers in a high density, shared, container > environment. But that would be against intentional abuse by someone who has code that causes the kernel to use a lot of memory on its behalf. We already need protection from that without memcg. -- To unsubscribe from this list: send the line "unsubscribe cgroups" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html