3 ms·
built-in security and resource limit options are seriously wonderful You could have used these already as separate tools that operate on process state. It's ju
by vezzy-fnord 12y ago
built-in security and resource limit options are seriously wonderful
You could have used these already as separate tools that operate on process state. It's just kernel subsystems and syscalls at the end of the day. util-linux has them.
- amyjess 12y agoBut with systemd, I can just throw an extra key-value pair in the unit file, and bam. No messing with wrapper programs, no modifying the service's code and recompiling, etc. It's not that it's not possible without systemd, it's that systemd makes it trivially easy.
- vezzy-fnord 12y agoIt's either throw an extra key-value pair or throw an extra program name in front of the line to start. They're both trivially easy, and the latter has the advantage of being totally agnostic of anything other than the kernel.