Class-based kernel resource management

CKRM = fine control over resource usage

Divide processes into classes
Select by uid, gid, program, socket, ...

Set resource limits for classes
CPU time
Memory usage
Disk I/O bandwidth
Network bandwidth
Number of processes

Can also provide guarantees