* cgroups
@ 2021-03-04 11:21 Russell Coker
2021-03-04 16:18 ` cgroups Chris PeBenito
2021-03-04 16:47 ` cgroups Dominick Grift
0 siblings, 2 replies; 3+ messages in thread
From: Russell Coker @ 2021-03-04 11:21 UTC (permalink / raw)
To: selinux-refpolicy
https://sourceforge.net/projects/libcg/files/
Above seems to be the source for the programs listed in policy/modules/
services/cgroup.fc, upstream has no changes since 2014 and the package in
Debian doesn't support cgroup2 so is pretty much useless.
Is there any reason for not deleting policy/modules/services/cgroup.* from
refpolicy?
Also as an aside what is the best way of managing cgroups and do we have
policy that works with it?
--
My Main Blog http://etbe.coker.com.au/
My Documents Blog http://doc.coker.com.au/
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: cgroups
2021-03-04 11:21 cgroups Russell Coker
@ 2021-03-04 16:18 ` Chris PeBenito
2021-03-04 16:47 ` cgroups Dominick Grift
1 sibling, 0 replies; 3+ messages in thread
From: Chris PeBenito @ 2021-03-04 16:18 UTC (permalink / raw)
To: Russell Coker, selinux-refpolicy
On 3/4/21 6:21 AM, Russell Coker wrote:
> https://sourceforge.net/projects/libcg/files/
>
> Above seems to be the source for the programs listed in policy/modules/
> services/cgroup.fc, upstream has no changes since 2014 and the package in
> Debian doesn't support cgroup2 so is pretty much useless.
>
> Is there any reason for not deleting policy/modules/services/cgroup.* from
> refpolicy?
No.
> Also as an aside what is the best way of managing cgroups and do we have
> policy that works with it?
Probably systemd.
--
Chris PeBenito
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: cgroups
2021-03-04 11:21 cgroups Russell Coker
2021-03-04 16:18 ` cgroups Chris PeBenito
@ 2021-03-04 16:47 ` Dominick Grift
1 sibling, 0 replies; 3+ messages in thread
From: Dominick Grift @ 2021-03-04 16:47 UTC (permalink / raw)
To: Russell Coker; +Cc: selinux-refpolicy
Russell Coker <russell@coker.com.au> writes:
> https://sourceforge.net/projects/libcg/files/
>
> Above seems to be the source for the programs listed in policy/modules/
> services/cgroup.fc, upstream has no changes since 2014 and the package in
> Debian doesn't support cgroup2 so is pretty much useless.
>
> Is there any reason for not deleting policy/modules/services/cgroup.* from
> refpolicy?
libgroup is indeed probably history. Although I vaguely recall it still
being used somewhere out there. I wouldnt mind removing it.
>
> Also as an aside what is the best way of managing cgroups and do we have
> policy that works with it?
I suppose depends who you ask. Many nowayday's will probably say that systemd
should be the only cgroup manager.
On systems with systemd i generally use systemd, one my openwrt powered
router i just use shell and (init)?scripts
--
gpg --locate-keys dominick.grift@defensec.nl
Key fingerprint = FCD2 3660 5D6B 9D27 7FC6 E0FF DA7E 521F 10F6 4098
https://sks-keyservers.net/pks/lookup?op=get&search=0xDA7E521F10F64098
Dominick Grift
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2021-03-04 16:49 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2021-03-04 11:21 cgroups Russell Coker
2021-03-04 16:18 ` cgroups Chris PeBenito
2021-03-04 16:47 ` cgroups Dominick Grift
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).