Hierarchical Resource Limits - status 3 & 4

[Edward Tomasz Napierala]

For the last two weeks I've reworked the syscall mechanism
to pass strings instead of binary structures, worked on rule filtering,
so that one can display only a few specific rules, or remove more than
one rule.  I'm pretty happy with ruleset management at this point,
actually.  I've also did some work on file descriptors and memory
usage accounting.  Next thing to do is to track down a problem that makes
resource usage counters go negative and then enable limit enforcement
and see what happens.

-- 
If you cut off my head, what would I say?  Me and my head, or me and my body?