mirror of
https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git
synced 2026-10-29 11:11:45 -04:00
userns: Recommend use of memory control groups.
In the help text describing user namespaces recommend use of memory control groups. In many cases memory control groups are the only mechanism there is to limit how much memory a user who can create user namespaces can use. Acked-by: Serge Hallyn <[email protected]> Signed-off-by: Eric W. Biederman <[email protected]>
This commit is contained in:
parent
0bd14b4fd7
commit
e11f0ae388
2 changed files with 21 additions and 0 deletions
|
|
@ -1035,6 +1035,13 @@ config USER_NS
|
|||
help
|
||||
This allows containers, i.e. vservers, to use user namespaces
|
||||
to provide different user info for different servers.
|
||||
|
||||
When user namespaces are enabled in the kernel it is
|
||||
recommended that the MEMCG and MEMCG_KMEM options also be
|
||||
enabled and that user-space use the memory control groups to
|
||||
limit the amount of memory a memory unprivileged users can
|
||||
use.
|
||||
|
||||
If unsure, say N.
|
||||
|
||||
config PID_NS
|
||||
|
|
|
|||
Loading…
Reference in a new issue