linux-kernel - [PATCH] cgroup: allow management of subtrees by cgroup namespaces

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-Id: <1462107838-9843-1-git-send-email-asarai@suse.de>
Date:	Sun,  1 May 2016 23:03:57 +1000
From:	Aleksa Sarai <asarai@...e.de>
To:	Tejun Heo <tj@...nel.org>, Li Zefan <lizefan@...wei.com>,
	Johannes Weiner <hannes@...xchg.org>
Cc:	cgroups@...r.kernel.org, linux-kernel@...r.kernel.org,
	dev@...ncontainers.org, Aleksa Sarai <cyphar@...har.com>,
	Aleksa Sarai <asarai@...e.de>
Subject: [PATCH] cgroup: allow management of subtrees by cgroup namespaces

Currently, the maintainers of runC are working on implementing rootless
containers using the new unprivileged user namespace capabilities of
Linux[1]. The only missing core feature is management of cgroups by the
container (such as setting resource limits and pausing containers).

Given the recent addition of the new cgroup namespace, this patchset
implements additional functionality to cgroup namespaces to allow
containers to set up and manage their own cgroup subtrees without
compromising the resource limitations enforced by cgroup controllers.

[1]: https://github.com/opencontainers/runc/pull/774

Aleksa Sarai (1):
  cgroup: allow management of subtrees by new cgroup namespaces

 kernel/cgroup.c | 71 +++++++++++++++++++++++++++++++++++++++++++++++++++++++--
 1 file changed, 69 insertions(+), 2 deletions(-)

-- 
2.8.1