[PATCH 1/1] cr: define CHECKPOINT_SUBTREE flag and sysctl

Serge E. Hallyn serue at us.ibm.com
Sun Apr 26 21:37:31 PDT 2009


Quoting Serge E. Hallyn (serge at hallyn.com):
> There's no need for a sysctl disallowing the CHECKPOINT_SUBTREE
> flag.  There should just be a unprivileged_checkpoint sysctl
> determining whether CAP_SYS_ADMIN is always needed.  Then
> the optional CHECKPOINT_SUBTREE is always allowed.
> 
> That makes much more sense.  Thanks, Nathan.
> 
> -serge

So here is the very slight rework:




More information about the Containers mailing list