diff options
| author |   Serge Hallyn <serge.hallyn@ubuntu.com> | 2013-07-23 13:18:53 -0500 |
|---|---|---|
| committer |   Eric W. Biederman <ebiederm@xmission.com> | 2013-08-30 23:44:09 -0700 |
| commit | f54fb863c6bbcbafdfc332b4a4260abb5a002137 (patch) | |
| tree | ced72284affb914341940a5f854e4d2dd56622d1 /ipc/namespace.c | |
| parent | pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (diff) | |
| download | linux-dev-f54fb863c6bbcbafdfc332b4a4260abb5a002137.tar.xz linux-dev-f54fb863c6bbcbafdfc332b4a4260abb5a002137.zip | |
capabilities: allow nice if we are privileged
We allow task A to change B's nice level if it has a supserset of
B's privileges, or of it has CAP_SYS_NICE. Also allow it if A has
CAP_SYS_NICE with respect to B - meaning it is root in the same
namespace, or it created B's namespace.
Signed-off-by: Serge Hallyn <serge.hallyn@canonical.com>
Reviewed-by: "Eric W. Biederman" <ebiederm@xmission.com>
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
Diffstat (limited to 'ipc/namespace.c')
0 files changed, 0 insertions, 0 deletions