Re: [PATCH] capabilities: audit capability use

2016-07-12 Thread Paul Moore
On Mon, Jul 11, 2016 at 7:14 AM, Topi Miettinen wrote: > There are many basic ways to control processes, including capabilities, > cgroups and resource limits. However, there are far fewer ways to find > out useful values for the limits, except blind trial and error. > >

Re: Trivial patches

2016-07-12 Thread Steve Grubb
Hello, On Tuesday, July 12, 2016 5:15:01 PM EDT Laurent Bigonville wrote: > Could you please merge the following patches that have been proposed to > debian by Nicolas Braud-Santoni? Yes, thanks. > The patches add the Documentation key in the .service file and also fix > some typos. They are

Re: [PATCH] capabilities: audit capability use

2016-07-12 Thread Tejun Heo
On Mon, Jul 11, 2016 at 07:47:44PM +, Topi Miettinen wrote: > It's really critical to be able to associate a task in the logs to > cgroups which were valid that time. Or can we infer somehow what cgroups When is "that time"? Without logging all operations, this is meaningless. > a task was

Trivial patches

2016-07-12 Thread Laurent Bigonville
Hi, Could you please merge the following patches that have been proposed to debian by Nicolas Braud-Santoni? The patches add the Documentation key in the .service file and also fix some typos. Cheers, Laurent Bigonville From: Nicolas Braud-Santoni Date: Tue, 28

Re: [PATCH] capabilities: audit capability use

2016-07-12 Thread Topi Miettinen
On 07/11/16 21:57, Eric W. Biederman wrote: > Topi Miettinen writes: > >> There are many basic ways to control processes, including capabilities, >> cgroups and resource limits. However, there are far fewer ways to find >> out useful values for the limits, except blind trial