tree 52d5ca28aaace7825b7350aab3fbad89c49ed8a5
parent 2f37bb12d30f69cd692933c4646dee73fc58eb43
author Aditya Kali <adityakali@google.com> 1410992191 -0700
committer Serge Hallyn <serge.hallyn@ubuntu.com> 1451934559 -0800

cgroup: cgroup namespace setns support

setns on a cgroup namespace is allowed only if
task has CAP_SYS_ADMIN in its current user-namespace and
over the user-namespace associated with target cgroupns.
No implicit cgroup changes happen with attaching to another
cgroupns. It is expected that the somone moves the attaching
process under the target cgroupns-root.

Signed-off-by: Aditya Kali <adityakali@google.com>
Signed-off-by: Serge E. Hallyn <serge.hallyn@canonical.com>