Linux has a PAM module that manipulates cgroups. How is it configured (what options does it support?)

1 Answer 1


The settings for the module are controlled by /etc/cgrules.conf just as for the rest of the cgroup facilities. When added to the PAM stack for a particular program, the program will inherit the cgroup as appropriate for its UID/GID.

If you add the pam_cgroup module to the login stack, the user's process will all automatically belong to the user's cgroup when they log in.

The details of this are actually documented in the README file for libcg. Here's a direct link to the README in the git repo.

  • for services other than login, like su, you can force the PAM module to fire by editing the services file in /etc/pam.d/_service_
    – Rooster
    Jan 16, 2014 at 0:08

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.