From: Colin Cross Date: Mon, 22 Mar 2010 18:28:03 +0000 (-0700) Subject: Fix cgroup: Add generic cgroup subsystem permission checks. X-Git-Tag: firefly_0821_release~9833^2~5^2~275 X-Git-Url: http://demsky.eecs.uci.edu/git/?a=commitdiff_plain;h=8dc808da529377d101b38b4d5ad1dbbc9aaea430;p=firefly-linux-kernel-4.4.55.git Fix cgroup: Add generic cgroup subsystem permission checks. Change-Id: Ib82f6a716686a3ebb4592112400fc5e4a2ce066c Signed-off-by: Colin Cross --- diff --git a/kernel/cgroup.c b/kernel/cgroup.c index f3d6f30c8cd1..b90316504417 100644 --- a/kernel/cgroup.c +++ b/kernel/cgroup.c @@ -1723,6 +1723,7 @@ int cgroup_attach_task(struct cgroup *cgrp, struct task_struct *tsk) */ failed_ss = ss; goto out; + } } else if (!capable(CAP_SYS_ADMIN)) { const struct cred *cred = current_cred(), *tcred;