[plug] Process Scheduling

Luke Brown luke at bur.st
Thu Jun 12 21:31:39 WST 2003


On Thursday, Jun 12, 2003, at 21:11 Australia/Perth, Craig Ringer wrote:
> A setuid copy of renice called, say, unice, that's only executable to 
> group "renice" (which you'd have to create). Like
>
> ---S--x---    1 root     renice        13948 Feb 19 01:19 
> /usr/bin/unice
>
> The same technique would not be good for nice, since processes started 
> by a setuid copy of nice would run as root. OTOH a setuid copy of 
> renice lets users mess with core system proceses, too - so there'd be 
> a level of implied trust.
>
> I can't think of any more secure method off the top of my head.

Cheers, that sounds like the sorta thing that im looking for...

Have quite a big need for this sorta thing, assigning each user's
processes different priorities etc, other than the nice tools I cant
really find anything that does this sorta thing...



More information about the plug mailing list