On 3/4/21 6:21 AM, Russell Coker wrote:
https://sourceforge.net/projects/libcg/files/ Above seems to be the source for the programs listed in policy/modules/ services/cgroup.fc, upstream has no changes since 2014 and the package in Debian doesn't support cgroup2 so is pretty much useless. Is there any reason for not deleting policy/modules/services/cgroup.* from refpolicy?
No.
Also as an aside what is the best way of managing cgroups and do we have policy that works with it?
Probably systemd. -- Chris PeBenito