Quoting Paul Jackson (pj@xxxxxxx): > Paul M wrote: > > > Is there any > > > way it would be ok to have cgroup_file_write() check for CAP_SYS_ADMIN? > > > > Sure, we could have flags in the subsys object for this kind of thing > > that let particular subsystems request this. > > That sounds like it would work fine ... the cpuset subsystem would > just not request this. Cool I'll keep it in mind then - though really right now it seems like it just amounts to slightly more complicated approach than just having the subsystems do the check in _write... thanks, -serge _______________________________________________ Containers mailing list Containers@xxxxxxxxxxxxxxxxxxxxxxxxxx https://lists.linux-foundation.org/mailman/listinfo/containers
