It seems like a lot could change betten css.can_attach and css.attach. What guarantees that by the time attach is called that the can_attach still holds? Are calls to cgroup_taskset_migrate serialized externally or should this be managed insied the css? I see a note in Documentations/cgroups/cgroups.txt that for can_attach cgroup_mutex should be held by caller, so I assume the former but want to confirm. -- To unsubscribe from this list: send the line "unsubscribe cgroups" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html