From 8dc808da529377d101b38b4d5ad1dbbc9aaea430 Mon Sep 17 00:00:00 2001 From: Colin Cross Date: Mon, 22 Mar 2010 11:28:03 -0700 Subject: [PATCH] Fix cgroup: Add generic cgroup subsystem permission checks. Change-Id: Ib82f6a716686a3ebb4592112400fc5e4a2ce066c Signed-off-by: Colin Cross --- kernel/cgroup.c | 1 + 1 file changed, 1 insertion(+) diff --git a/kernel/cgroup.c b/kernel/cgroup.c index f3d6f30c8cd1..b90316504417 100644 --- a/kernel/cgroup.c +++ b/kernel/cgroup.c @@ -1723,6 +1723,7 @@ int cgroup_attach_task(struct cgroup *cgrp, struct task_struct *tsk) */ failed_ss = ss; goto out; + } } else if (!capable(CAP_SYS_ADMIN)) { const struct cred *cred = current_cred(), *tcred; -- 2.34.1