On Mon, Feb 11, 2013 at 05:42:59PM +0000, Serge E. Hallyn wrote: > Note I said only forbid behavior changes - not exception changes - to > cgroups with children. that won't do much. behavior change is the simplest: if you change a behavior, you wipe the local exceptions unless the special (deny, deny) -> (allow, deny) case. exception propagation is harder getting rid of local settings would buy more simplicity -- Aristeu -- To unsubscribe from this list: send the line "unsubscribe cgroups" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html