[RFC][PATCH] Devices visibility container

[Serge E. Hallyn]

Quoting Cedric Le Goater (clg at fr.ibm.com):
> [ ... ] 
> 
> > Maybe it's best if i just code up an example.  I'll be gone part of the
> > week, and should send out new versions of some other patches first, but
> > getting two approaches to this to compare and contrast can't hurt.
> 
> I guess we will need a control group subsystem in both approach, right ?

Yes.  Pavel's has one, and I would use one both for task tracking and
to use the cgroup vfs interface to construct the device whitelists.

thanks,
-serge