Messages in this thread | | | Date | Tue, 2 Jun 2015 12:07:23 -0700 | Subject | Re: [RFC][PATCH 0/2] Android style loosening of cgroup attach permissions | From | John Stultz <> |
| |
On Wed, May 20, 2015 at 8:41 PM, John Stultz <john.stultz@linaro.org> wrote: > As a heads up, this is just a first RFC and not a submission. > > Android currently loosens the cgroup attchment permissions, allowing > tasks with CAP_SYS_NICE to be able to allow tasks to move arbitrary > tasks across cgroups. > > At first glance, overloading CAP_SYS_NICE seems a bit hackish, but this > shows that there is a active and widely deployed use for different cgroup > attachment rules then what is currently available. > > I've tried to rework the patches so this attachment policy is build > time configurable, and wanted to send them out for review so folks > might give their thoughts on this implementation and what they might > see as a better way to go about achieving the same goal. > > Thoughts and feedback would be appriciated!
Ping? Not sure if I hit folks at a busy time or if I didn't cc the right folks?
thanks -john
| |