>Although this is a definitely system-wide knob, wouldn't it make sense to >implement this also on a per-cgroup basis? memory.min and memory.low are alreary exist. Regarding the protection of file pages, we are primarily interested in shared libraries. I don't see the point of creating such tunables for cgroups.