Linux has a PAM module that manipulates cgroups. How is it configured (what options does it support?)
The settings for the module are controlled by
/etc/cgrules.conf just as for the rest of the cgroup facilities. When added to the PAM stack for a particular program, the program will inherit the cgroup as appropriate for its UID/GID.
If you add the
pam_cgroup module to the login stack, the user’s process will all automatically belong to the user’s cgroup when they log in.