[PATCH 1/1] cr: define CHECKPOINT_SUBTREE flag and sysctl
Serge E. Hallyn
serue at us.ibm.com
Sun Apr 26 21:37:31 PDT 2009
Quoting Serge E. Hallyn (serge at hallyn.com):
> There's no need for a sysctl disallowing the CHECKPOINT_SUBTREE
> flag. There should just be a unprivileged_checkpoint sysctl
> determining whether CAP_SYS_ADMIN is always needed. Then
> the optional CHECKPOINT_SUBTREE is always allowed.
>
> That makes much more sense. Thanks, Nathan.
>
> -serge
So here is the very slight rework:
More information about the Containers
mailing list