| commit | 12a90e1fc4641fd178296b7d87e39033cbca2525 | [log] [tgz] |
|---|---|---|
| author | Aditya Kali <adityakali@google.com> | Wed Sep 17 15:16:31 2014 -0700 |
| committer | Serge Hallyn <serge.hallyn@ubuntu.com> | Mon Jan 04 11:09:19 2016 -0800 |
| tree | 52d5ca28aaace7825b7350aab3fbad89c49ed8a5 | |
| parent | 2f37bb12d30f69cd692933c4646dee73fc58eb43 [diff] |
cgroup: cgroup namespace setns support setns on a cgroup namespace is allowed only if task has CAP_SYS_ADMIN in its current user-namespace and over the user-namespace associated with target cgroupns. No implicit cgroup changes happen with attaching to another cgroupns. It is expected that the somone moves the attaching process under the target cgroupns-root. Signed-off-by: Aditya Kali <adityakali@google.com> Signed-off-by: Serge E. Hallyn <serge.hallyn@canonical.com>