[vault_]

This post is from 2011 and the techniques it describes have been superseded by cgroups. One of the followup posts is specifically about them: http://osgtech.blogspot.com/2011/07/part-iii-bulletproof-pro...