This is an updated version of the nproc patchset[1], in which the forking cleanup issue has been resolved by adding can_fork and cancel_fork callbacks to cgroup subsystems. The can_fork callback is run early enough that it doesn't get called after the "point of no return" where the process is exposed (which is when fork) is called, and cancel_fork is run during the cleanup of copy_process if the fork fails due to other reasons. [1]: https://lkml.org/lkml/2015/2/22/204 Aleksa Sarai (2): cgroups: allow a cgroup subsystem to reject a fork cgroups: add an nproc subsystem include/linux/cgroup.h | 9 ++ include/linux/cgroup_subsys.h | 4 + init/Kconfig | 10 +++ kernel/Makefile | 1 + kernel/cgroup.c | 80 +++++++++++++---- kernel/cgroup_nproc.c | 198 ++++++++++++++++++++++++++++++++++++++++++ kernel/fork.c | 12 ++- 7 files changed, 296 insertions(+), 18 deletions(-) create mode 100644 kernel/cgroup_nproc.c -- 2.3.1 -- To unsubscribe from this list: send the line "unsubscribe cgroups" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html