title: cgroups isolation (separating groups processes)
body: <p>i have a question regarding cgroups, especially considering isolation.</p>
  
  <p>Wikipedia states, that you can use cgroups to isolate groups, so that there are "separate namespaces for groups, so they don't see each other's processes, network connections or files".</p>
  
  <p>I already know, how to share or divide memory or cpu between groups, but would like to know, how groups or users can only see their own processes for example (what has to be in cgrules.conf and in cgconfig.conf). </p>
  
  <p>Example:</p>
  
  <p>when a user of a specified group enters a ps (or ps -aux) in his console, only his processes should be listed, not that of other users/groups (as in ps -u).
  i know that i could do a quick and dirty programming appoach to accomplish a thing like this, but i'd like to know how it works with cgroups.</p>
  
  <p>Thank you very much for your expertise!</p>