On Fri, Jun 5, 2009 at 2:55 AM, Balbir Singh<balbir@xxxxxxxxxxxxxxxxxx> wrote: > > What about applications running as root, that can create their own > groups? How about multiple instances of the same application started? > Do applications need to know that creating a group will hurt > guarantees provided to others? Yes, of course. If you're handing out guarantees, but other users can/will create cgroups with whatever parameters they like and won't respect the guarantees that you've made, then those guarantees are worthless. How do hard limits help in that situation? Paul -- To unsubscribe from this list: send the line "unsubscribe kvm" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html