Say I have disk intensive software started from different sources (ex: tar). Is it possible to always run this with low priority ioniceness? Without using hacks like replacing the command with a shell script and ionice'ing $command.real from there. That breaks easy apt-get updates.
So some kind of policy.
For example (ab)using AppArmor or plain Linux Security Modules for this.