Cgroups are more about resource allocation than access control, but they may still be of some use under the hood (as they are for eg. docker). They certainly ar

Cgroups are more about resource allocation than access control, but they may still be of some use under the hood (as they are for eg. docker). They certainly aren't the abstraction the end-user needs in order to enforce separation between application sandboxes.