Hello, On Tue, Oct 04, 2016 at 12:46:24PM -0700, John Stultz wrote: > Ok. I'll respin this introducing and using a new CAP value. > > That said, while CAP_SYS_NICE seems a bit overloaded here, it doesn't > conceptually have that much friction for use with cpuset and cpuctrl > cgroups: We need to solve it for userns too and I wanna avoid pushing permission logic into specific controllers. The logical extensions of that would be protecting control interface files by different CAPs too. It might work for some knobs and then there will all but certainly unclear corner cases and so on. Let's please not go there. Thanks. -- tejun -- To unsubscribe from this list: send the line "unsubscribe cgroups" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
