Documentation/namespaces/resource-control.txt

Chinese translated version of Documentation/namespaces/resource-control.txt
 
If you have any comment or update to the content, please contact the
original document maintainer directly.  However, if you have a problem
communicating in English you can also ask the Chinese maintainer for
help.  Contact the Chinese maintainer if this translation is outdated
or if there is a problem with the translation.


Chinese maintainer: 马煜晨  380319072@qq.com
---------------------------------------------------------------------
Documentation/namespaces/resource-control.txt 的中文翻译
如果想评论或更新本文的内容，请直接联系原文档的维护者。如果你使用英文
交流有困难的话，也可以向中文版维护者求助。如果本翻译更新不及时或者翻
译存在问题，请联系中文版维护者。
中文版维护者： 马煜晨  380319072@qq.com
中文版翻译者： 马煜晨  380319072@qq.com
中文版校译者： 马煜晨  380319072@qq.com
 


以下为正文
---------------------------------------------------------------------


There are a lot of kinds of objects in the kernel that don't have
individual limits or that have limits that are ineffective when a set
of processes is allowed to switch user ids.  With user namespaces
enabled in a kernel for people who don't trust their users or their
users programs to play nice this problems becomes more acute.


在内核中有很多种类的目标，他们没有个别限制或有一些无效的限制当一组进程
允许转换用户IDS时。随着用户空间在他们不相信的用户或他们的用户程序启动，
发挥好这个问题变得更加严重。


Therefore it is recommended that memory control groups be enabled in
kernels that enable user namespaces, and it is further recommended
that userspace configure memory control groups to limit how much
memory user's they don't trust to play nice can use.


因此，建议存储器控制组启用内核，使用户的命名空间，进一步建议用户空间
配置内存控制组来限制用户不信任能使用的内存。


Memory control groups can be configured by installing the libcgroup
package present on most distros editing /etc/cgrules.conf,
/etc/cgconfig.conf and setting up libpam-cgroup.


内存控制组可以可以配置安装libcgroup包出现在distros，editing /etc/cgrules.conf,
etc/cgconfig.conf和libpam-cgroup中的装置。