Kernel-enforced, user- and admin-configurable restrictions on resource consumption.