ns_can_attach (nsproxy cgroup)

Grzegorz Nosek root at localdomain.pl
Thu Dec 18 06:45:08 PST 2008


On śro, gru 17, 2008 at 08:52:03 +0800, Li Zefan wrote:
> >>From 2abb608222f3dfd1c5da3022a75c824f2b00b3f5 Mon Sep 17 00:00:00 2001
> > From: Grzegorz Nosek <root at localdomain.pl>
> > Date: Fri, 12 Dec 2008 21:48:09 +0100
> > Subject: [PATCH] Relax ns_can_attach checks to allow attaching to grandchild cgroups
> > 
> > The ns_proxy cgroup allows moving processes to child cgroups only one
> > level deep at a time. This commit relaxes this restriction and makes it
> > possible to attach tasks directly to grandchild cgroups, e.g.:
> > 
> > ($pid is in the root cgroup)
> > echo $pid > /cgroup/CG1/CG2/tasks
> > 
> > Previously this operation would fail with -EPERM and would have to be
> > performed as two steps:
> > echo $pid > /cgroup/CG1/tasks
> > echo $pid > /cgroup/CG1/CG2/tasks
> > 
> 
> Now looks good to me. :)
> 
> Reviewed-by: Li Zefan <lizf at cn.fujitsu.com>

Thanks, shall I send the patch somewhere else for some mainstream tree
inclusion or is somebody willing to pick it up from here?

Best regards,
 Grzegorz Nosek


More information about the Containers mailing list