From 522e246332fe577cd0baab953b304d4a519b813f Mon Sep 17 00:00:00 2001 From: Colin Cross Date: Mon, 22 Mar 2010 11:28:03 -0700 Subject: [PATCH] Fix cgroup: Add generic cgroup subsystem permission checks. Change-Id: Ib82f6a716686a3ebb4592112400fc5e4a2ce066c Signed-off-by: Colin Cross --- kernel/cgroup.c | 1 + 1 file changed, 1 insertion(+) diff --git a/kernel/cgroup.c b/kernel/cgroup.c index aab77936c064..d1fe8b209943 100644 --- a/kernel/cgroup.c +++ b/kernel/cgroup.c @@ -1783,6 +1783,7 @@ int cgroup_attach_task(struct cgroup *cgrp, struct task_struct *tsk) */ failed_ss = ss; goto out; + } } else if (!capable(CAP_SYS_ADMIN)) { const struct cred *cred = current_cred(), *tcred; -- 2.11.0