Hello, On Tue, Oct 04, 2016 at 11:25:29PM -0500, Serge E. Hallyn wrote: > > > If anything I'd say the GLOBAL_ROOT_UID check could be taken out since > > > otherwise a host-root task effectively cannot drop this capability. > > > > Is this ok to leave for a separate patch? > > Yeah. And I'm not sure whether Tejun would object to that idea. With the capability, I think it'd be better to get rid of the explicit UID check, but can we please rename the cap to CAP_CGROUP_MIGRATE and loop in linux-api mailing list and ppl who are more familiar with CAPs? Thanks! -- tejun -- To unsubscribe from this list: send the line "unsubscribe cgroups" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
