Revert "ANDROID: [RFC]cgroup: Change from CAP_SYS_NICE to CAP_SYS_RESOURCE for cgroup migration permissions"
This reverts commit 8cc698d951.
Change-Id: Iad523b2f7fa83c461a5e965272319fd8f65ef10b
Signed-off-by: Dmitry Shmidt <dimitrysh@google.com>
This commit is contained in:
+1
-1
@@ -2857,7 +2857,7 @@ static int cgroup_procs_write_permission(struct task_struct *task,
|
||||
if (!uid_eq(cred->euid, GLOBAL_ROOT_UID) &&
|
||||
!uid_eq(cred->euid, tcred->uid) &&
|
||||
!uid_eq(cred->euid, tcred->suid) &&
|
||||
!ns_capable(tcred->user_ns, CAP_SYS_RESOURCE))
|
||||
!ns_capable(tcred->user_ns, CAP_SYS_NICE))
|
||||
ret = -EACCES;
|
||||
|
||||
if (!ret && cgroup_on_dfl(dst_cgrp)) {
|
||||
|
||||
Reference in New Issue
Block a user