[PATCH 3/4] device_cgroup: Export __devcgroup_check_permission
Harish.Kasiviswanathan at amd.com
Mon May 13 21:47:26 UTC 2019
Could you please review this patch?
On 2019-05-01 10:59 a.m., Kasiviswanathan, Harish wrote:
> For AMD compute (amdkfd) driver.
> All AMD compute devices are exported via single device node /dev/kfd. As
> a result devices cannot be controlled individually using device cgroup.
> AMD compute devices will rely on its graphics counterpart that exposes
> /dev/dri/renderN node for each device. For each task (based on its
> cgroup), KFD driver will check if /dev/dri/renderN node is accessible
> before exposing it.
> Signed-off-by: Harish Kasiviswanathan <Harish.Kasiviswanathan at amd.com>
> Reviewed-by: Felix Kuehling <Felix.Kuehling at amd.com>
> security/device_cgroup.c | 1 +
> 1 file changed, 1 insertion(+)
> diff --git a/security/device_cgroup.c b/security/device_cgroup.c
> index cd97929fac66..e3a9ad5db5a0 100644
> --- a/security/device_cgroup.c
> +++ b/security/device_cgroup.c
> @@ -824,3 +824,4 @@ int __devcgroup_check_permission(short type, u32 major, u32 minor,
> return 0;
More information about the amd-gfx