Re: ns_can_attach (nsproxy cgroup)

[Grzegorz Nosek <root-AfQBxy1nhrQ00sYp1HPQUA@public.gmane.org>]

On śro, gru 17, 2008 at 08:52:03 +0800, Li Zefan wrote:
> >>From 2abb608222f3dfd1c5da3022a75c824f2b00b3f5 Mon Sep 17 00:00:00 2001
> > From: Grzegorz Nosek <root@localdomain.pl>
> > Date: Fri, 12 Dec 2008 21:48:09 +0100
> > Subject: [PATCH] Relax ns_can_attach checks to allow attaching to grandchild cgroups
> > 
> > The ns_proxy cgroup allows moving processes to child cgroups only one
> > level deep at a time. This commit relaxes this restriction and makes it
> > possible to attach tasks directly to grandchild cgroups, e.g.:
> > 
> > ($pid is in the root cgroup)
> > echo $pid > /cgroup/CG1/CG2/tasks
> > 
> > Previously this operation would fail with -EPERM and would have to be
> > performed as two steps:
> > echo $pid > /cgroup/CG1/tasks
> > echo $pid > /cgroup/CG1/CG2/tasks
> > 
> 
> Now looks good to me. :)
> 
> Reviewed-by: Li Zefan <lizf@cn.fujitsu.com>

Thanks, shall I send the patch somewhere else for some mainstream tree
inclusion or is somebody willing to pick it up from here?

Best regards,
 Grzegorz Nosek
_______________________________________________
Containers mailing list
Containers@lists.linux-foundation.org
https://lists.linux-foundation.org/mailman/listinfo/containers