linux/kernel/cgroup
Eric W. Biederman ee1e2de73c UPSTREAM: cgroup-v1: Require capabilities to set release_agent
The cgroup release_agent is called with call_usermodehelper.  The function
call_usermodehelper starts the release_agent with a full set fo capabilities.
Therefore require capabilities when setting the release_agaent.

Reported-by: Tabitha Sable <tabitha.c.sable@gmail.com>
Tested-by: Tabitha Sable <tabitha.c.sable@gmail.com>
Fixes: 81a6a5cdd2 ("Task Control Groups: automatic userspace notification of idle cgroups")
Cc: stable@vger.kernel.org # v2.6.24+
Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>
Signed-off-by: Tejun Heo <tj@kernel.org>
(cherry picked from commit 24f6008564)
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
Change-Id: If663568d24f781c58c882d69a5b81a9327c0e6fe
2022-02-07 16:29:18 +00:00
..
cgroup-internal.h ANDROID: cgroup: Add android_rvh_cgroup_force_kthread_migration 2021-05-04 20:13:09 +00:00
cgroup-v1.c UPSTREAM: cgroup-v1: Require capabilities to set release_agent 2022-02-07 16:29:18 +00:00
cgroup.c This is the 5.10.80 stable release 2021-11-19 11:50:41 +01:00
cpuset.c Revert half of "ANDROID: cpu/hotplug: create vendor hook for cpu_up/cpu_down" 2022-01-21 13:13:16 +01:00
debug.c kernel: cgroup: fix misuse of %x 2019-05-06 08:47:48 -07:00
freezer.c cgroup: freezer: don't change task and cgroups status unnecessarily 2019-11-07 07:38:41 -08:00
legacy_freezer.c ANDROID: freezer: export the freezer_cgrp_subsys for GKI purpose. 2021-03-23 15:17:36 +00:00
Makefile cgroup: cgroup v2 freezer 2019-04-19 11:26:48 -07:00
namespace.c nsproxy: add struct nsset 2020-05-09 13:57:12 +02:00
pids.c clone3: allow spawning processes into cgroups 2020-02-12 17:57:51 -05:00
rdma.c treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 451 2019-06-19 17:09:08 +02:00
rstat.c cgroup: Fix rootcg cpu.stat guest double counting 2021-11-18 14:04:13 +01:00