Messages in this thread | | | Date | Fri, 14 Mar 2008 07:15:34 -0700 | From | "Paul Menage" <> | Subject | Re: [RFC] cgroups: implement device whitelist lsm (v2) |
| |
On Fri, Mar 14, 2008 at 7:05 AM, Serge E. Hallyn <serue@us.ibm.com> wrote: > > > A task may only be moved to another devcgroup if it is moving to > > > a direct descendent of its current devcgroup. > > > > What's the rationale for that? > > To prevent it escaping to laxer device permissions, which of course only > makes sense if we do what you recommend above :) >
That makes it impossible for a root process to enter a child cgroup, do something, and then go back to its own cgroup. Why aren't the existing cgroup security semantics sufficient?
Paul
| |