Quoting Cedric Le Goater (clg@fr.ibm.com):
> [ ... ] 
> 
> > Maybe it's best if i just code up an example.  I'll be gone part of the
> > week, and should send out new versions of some other patches first, but
> > getting two approaches to this to compare and contrast can't hurt.
> 
> I guess we will need a control group subsystem in both approach, right ?

Yes.  Pavel's has one, and I would use one both for task tracking and
to use the cgroup vfs interface to construct the device whitelists.

thanks,
-serge
_______________________________________________
Containers mailing list
Containers@lists.linux-foundation.org
https://lists.linux-foundation.org/mailman/listinfo/containers