[Intel-gfx] [PATCH v3 3/6] cgroup: Introduce cgroup_permission()
tj at kernel.org
Tue Mar 13 20:43:35 UTC 2018
On Tue, Mar 06, 2018 at 03:46:57PM -0800, Matt Roper wrote:
> Non-controller kernel subsystems may base access restrictions for
> cgroup-related syscalls/ioctls on a process' access to the cgroup.
> Let's make it easy for other parts of the kernel to check these cgroup
I'm not sure about pulling in cgroup perms this way because cgroup
access perms have more to it than the file and directory permissions.
Can't this be restricted to root or some CAP?
More information about the Intel-gfx