Redirect standard error output to 'file'. The 'file' has to be accessible
inside the sandbox.
+*-c, --chdir=*'dir'::
+ Change directory to 'dir' before executing the program. This path must be
+ relative to the root of the sandbox.
+
*-p, --processes*[*=*'max']::
Permit the program to create up to 'max' processes and/or threads. Please
keep in mind that time and memory limit do not work with multiple processes
that this feature needs special system setup described in the REQUIREMENTS
section.
-*-c, --cg*::
+*--cg*::
Enable use of control groups.
*--cg-mem=*'size'::
tree for description.
Before you run isolate with control groups, you have to mount the control group
-filesystem by doing "+mount -t cgroup none -o cpuset,cpuacct,memory /sys/fs/cgroup+".
+filesystem. Most modern Linux distributions use libcgroup, which mounts a tmpfs
+at /sys/fs/cgroup, with individual controllers mounted within subdirectories.
+It is recommended to use your distribution's cgroup configuration support.
+Debian-based distributions have a choice of the cgroup-lite or cgroup-bin
+packages; Red Hat-based distributions provide the libcgroup package.
LICENSE
-------