17:51 - Sunday, 20 April 2014

How Is The Cgroup Pam Module Configured?

Linux has a PAM module that manipulates cgroups. How is it configured (what options does it support?)

The settings for the module are controlled by /etc/cgrules.conf just as for the rest of the cgroup facilities. When added to the PAM stack for a particular program, the program will inherit the cgroup as appropriate for its UID/GID.

If you add the pam_cgroup module to the login stack, the user’s process will all automatically belong to the user’s cgroup when they log in.

The details of this are actually documented in the README file for libcg. Here’s a direct link to the README in the git repo.