Kconfig (638d3c63811e31b2745f7fdd568b38c8abcffe03) | Kconfig (49b786ea146f69c371df18e81ce0a2d5839f865c) |
---|---|
1config ARCH 2 string 3 option env="ARCH" 4 5config KERNELVERSION 6 string 7 option env="KERNELVERSION" 8 --- 941 unchanged lines hidden (view full) --- 950 Say N if unsure. 951 952config CGROUP_FREEZER 953 bool "Freezer cgroup subsystem" 954 help 955 Provides a way to freeze and unfreeze all tasks in a 956 cgroup. 957 | 1config ARCH 2 string 3 option env="ARCH" 4 5config KERNELVERSION 6 string 7 option env="KERNELVERSION" 8 --- 941 unchanged lines hidden (view full) --- 950 Say N if unsure. 951 952config CGROUP_FREEZER 953 bool "Freezer cgroup subsystem" 954 help 955 Provides a way to freeze and unfreeze all tasks in a 956 cgroup. 957 |
958config CGROUP_PIDS 959 bool "PIDs cgroup subsystem" 960 help 961 Provides enforcement of process number limits in the scope of a 962 cgroup. Any attempt to fork more processes than is allowed in the 963 cgroup will fail. PIDs are fundamentally a global resource because it 964 is fairly trivial to reach PID exhaustion before you reach even a 965 conservative kmemcg limit. As a result, it is possible to grind a 966 system to halt without being limited by other cgroup policies. The 967 PIDs cgroup subsystem is designed to stop this from happening. 968 969 It should be noted that organisational operations (such as attaching 970 to a cgroup hierarchy will *not* be blocked by the PIDs subsystem), 971 since the PIDs limit only affects a process's ability to fork, not to 972 attach to a cgroup. 973 |
|
958config CGROUP_DEVICE 959 bool "Device controller for cgroups" 960 help 961 Provides a cgroup implementing whitelists for devices which 962 a process in the cgroup can mknod or open. 963 964config CPUSETS 965 bool "Cpuset support" --- 1059 unchanged lines hidden --- | 974config CGROUP_DEVICE 975 bool "Device controller for cgroups" 976 help 977 Provides a cgroup implementing whitelists for devices which 978 a process in the cgroup can mknod or open. 979 980config CPUSETS 981 bool "Cpuset support" --- 1059 unchanged lines hidden --- |