Hello All, I found the "devices.allow" file can't be opened in read-write mode on the 3.14 kernel. I uses libcgroup, which opens devices.allow with O_RDWR. This works fine before 3.14 and fails one 3.14. This files has write-only permissions. I have tried to create a regular file with the same permission and kernel allows to open it with O_RDWR. So what do you think is it a problem, which must be fixed? 5136 stat("/sys/fs/cgroup/devices//vz-101/devices.allow", {st_mode=S_IFREG|0200, st_size=0, ...}) = 0 5136 open("/sys/fs/cgroup/devices//vz-101/devices.allow", O_RDONLY|O_CLOEXEC) = -1 EACCES (Permission denied) Linux avagin-fc19-cr 3.14.0+ #294 SMP Fri Apr 11 20:02:26 MSK 2014 x86_64 x86_64 x86_64 GNU/Linux ----> 1 os.open("/sys/fs/cgroup/devices/devices.deny", os.O_RDWR) OSError: [Errno 13] Permission denied: '/sys/fs/cgroup/devices/devices.deny' [root@avagin-fc19-cr ~]# ls -l /sys/fs/cgroup/devices/devices.deny --w------- 1 root root 0 May 7 15:16 /sys/fs/cgroup/devices/devices.deny Linux localhost.localdomain 3.13.8-200.fc20.x86_64 #1 SMP Tue Apr 1 03:35:46 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux In [2]: os.open("/sys/fs/cgroup/devices/devices.deny", os.O_RDWR) Out[2]: 5 [root@localhost avagin]# ls -l /sys/fs/cgroup/devices/devices.deny --w------- 1 root root 0 May 3 16:12 /sys/fs/cgroup/devices/devices.deny Thanks, Andrey _______________________________________________ Containers mailing list Containers@xxxxxxxxxxxxxxxxxxxxxxxxxx https://lists.linuxfoundation.org/mailman/listinfo/containers