containers@lists.linux-foundation.org, max@duempel.org, menage@google.com Can limit the number of fork()/clone() calls in a cgroup. It is useful as a safeguard against fork bombs. Signed-off-by: Max Kellermann <mk@cm4all.com> --- Documentation/cgroups/fork.txt | 30 ++++++ include/linux/cgroup_fork.h | 26 +++++ include/linux/cgroup_subsys.h | 6 + init/Kconfig | 6 + kernel/Makefile | 1 kernel/cgroup