13 Mar
2018
13 Mar
'18
8:43 p.m.
On Tue, Mar 06, 2018 at 03:46:57PM -0800, Matt Roper wrote:
Non-controller kernel subsystems may base access restrictions for cgroup-related syscalls/ioctls on a process' access to the cgroup. Let's make it easy for other parts of the kernel to check these cgroup permissions.
I'm not sure about pulling in cgroup perms this way because cgroup access perms have more to it than the file and directory permissions. Can't this be restricted to root or some CAP?
Thanks.
--
tejun