Quoting Tejun Heo (tj@xxxxxxxxxx): > On Tue, Jul 23, 2013 at 01:16:06PM -0500, Serge Hallyn wrote: > > We allow a task to change its own devices cgroup, or to change other tasks' > > cgroups if it has CAP_SYS_ADMIN. > > > > Also allow task A to change task B's cgroup if task A has CAP_SYS_ADMIN > > with respect to task B - meaning A is root in the same userns, or A > > created B's userns. > > As discussed multpile times, cgroup isn't gonna support delegating > cgroup management directly into containers, so this doesn't really > jive with where we're heading. This doesn't delegate it into the container. It allows me, on the host, to set the cgroup for a container. thanks, -serge _______________________________________________ Containers mailing list Containers@xxxxxxxxxxxxxxxxxxxxxxxxxx https://lists.linuxfoundation.org/mailman/listinfo/containers
