The cgroup rules definition file, /etc/cgrules.conf, defines the control groups to which the kernel should assign processes when they are created. Each line of the file consists of a definition in one of the following formats.

Define a cgroup and permitted subsystems for the named user. The optional command_name specifies the name or full pathname of a command. If you specify the subsystem as *, the user can use all subsystems that are associated with the cgroup.

user_name[:command_name]
                subsystem_name[,...]
                cgroup_name

Define a cgroup and subsystems for the named group.

@group_name[:command_name]
                subsystem_name[,...]
                cgroup_name

Define a cgroup and subsystems for the same user or group as was specified on the previous line.

%[:command_name]
            subsystem_name[,...]
             cgroup_name

Define a cgroup and subsystems for all users.

*[:command_name]
            subsystem_name[,...]
             cgroup_name

You can include comments in the file by preceding them with a # character.

The following example shows some rule definitions for users and groups:

# Assign tasks run by the oracle user to dbgrp
oracle    cpu,cpuset,memory    dbgrp
# Assign tasks run by the guest group to devgrp
# except for rm tasks, which are assigned to devgrp/rm
@guest    devices              devgrp
%:rm      devices              devgrp/rm