**Computations under control** will run a specificed program as a non-interactive computation process, allowing it to be listed and regulated by the user of the computer. To avoid needless use of setuid, it uses a simple client-server architecture. On boot, compctld daemon is started (as root), sets up the cgroup infrastructure and accepts requests from clients for moving a process to cgroup, killing a cgroup'd process and tweaking the cgroup limits. The client compctl interface simply queries the server using a synchronous protocol over a UNIX socket. First, the client sends a command string message coupled with a SCM_CREDENTIALS ancilliary message. Then, it receives a reply message. Connection is closed immediately on breach of protocol. You can tweak some simple compile-time configuration variables in file 'common.h'. Build everything using the `make` command. Then, arrange compctld to be run on boot and put compctl in $PATH for your users to enjoy.