]> git.openfabrics.org - ~emulex/infiniband.git/commit
device_cgroup: remove can_attach
authorSerge Hallyn <serge.hallyn@ubuntu.com>
Tue, 22 Oct 2013 23:34:00 +0000 (01:34 +0200)
committerTejun Heo <tj@kernel.org>
Thu, 24 Oct 2013 10:56:56 +0000 (06:56 -0400)
commit73ba353471e0b692f398f3d63018b7f46ccf1d3e
tree132a9cc3ca7d329adb0b3f54d9b7f086db388f7f
parent2ff2a7d03bbe472ed44a8380dbdbea490d81c59d
device_cgroup: remove can_attach

It is really only wanting to duplicate a check which is already done by the
cgroup subsystem.

With this patch, user jdoe still cannot move pid 1 into a devices cgroup
he owns, but now he can move his own other tasks into devices cgroups.

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>
Signed-off-by: Tejun Heo <tj@kernel.org>
Cc: Aristeu Rozanski <aris@redhat.com>
security/device_cgroup.c