you can actually use cgroups without lxc, btw. if you do use apparmor and grsec (as in RBAC's part of grsec in particular) it's probably acceptable, but I have

you can actually use cgroups without lxc, btw. if you do use apparmor and grsec (as in RBAC's part of grsec in particular) it's probably acceptable, but I haven't seen it mentioned on the website - and people figure, they'll just use lxc "and be safe".