Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1753234AbbEUDlw (ORCPT ); Wed, 20 May 2015 23:41:52 -0400 Received: from mail-pd0-f178.google.com ([209.85.192.178]:35125 "EHLO mail-pd0-f178.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1753070AbbEUDls (ORCPT ); Wed, 20 May 2015 23:41:48 -0400 From: John Stultz To: lkml Cc: John Stultz , Tejun Heo , Li Zefan , Jonathan Corbet , cgroups@vger.kernel.org, Android Kernel Team , Rom Lemarchand , Colin Cross Subject: [RFC][PATCH 0/2] Android style loosening of cgroup attach permissions Date: Wed, 20 May 2015 20:41:12 -0700 Message-Id: <1432179674-19154-1-git-send-email-john.stultz@linaro.org> X-Mailer: git-send-email 1.9.1 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1950 Lines: 53 As a heads up, this is just a first RFC and not a submission. Android currently loosens the cgroup attchment permissions, allowing tasks with CAP_SYS_NICE to be able to allow tasks to move arbitrary tasks across cgroups. At first glance, overloading CAP_SYS_NICE seems a bit hackish, but this shows that there is a active and widely deployed use for different cgroup attachment rules then what is currently available. I've tried to rework the patches so this attachment policy is build time configurable, and wanted to send them out for review so folks might give their thoughts on this implementation and what they might see as a better way to go about achieving the same goal. Thoughts and feedback would be appriciated! thanks -john Cc: Tejun Heo Cc: Li Zefan Cc: Jonathan Corbet Cc: cgroups@vger.kernel.org Cc: Android Kernel Team Cc: Rom Lemarchand Cc: Colin Cross Colin Cross (1): cgroup: Add generic cgroup subsystem permission checks Rom Lemarchand (1): cgroup: Add a memcg and cpu cg allow_attach policy for Android Documentation/cgroups/cgroups.txt | 9 +++++++++ include/linux/cgroup.h | 14 ++++++++++++++ init/Kconfig | 7 +++++++ kernel/Makefile | 1 + kernel/cgroup.c | 39 ++++++++++++++++++++++++++++++++++++--- kernel/cgroup_nice_attach.c | 29 +++++++++++++++++++++++++++++ kernel/sched/core.c | 3 +++ mm/memcontrol.c | 3 +++ 8 files changed, 102 insertions(+), 3 deletions(-) create mode 100644 kernel/cgroup_nice_attach.c -- 1.9.1 -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/