Re: [patch] cgroups: disallow attaching kthreadd

From: David Rientjes
Date: Wed Apr 04 2012 - 19:14:22 EST


On Wed, 4 Apr 2012, Tejun Heo wrote:

> I don't see much problem with the proposed solution and am gonna take
> it unless there are pretty good reasons not to.
>

The only cgroup that cannot allow kthreadd is cpusets and that's
illustrated by Mike's changelog. Restricting it for all cgroups is
completely unnecessary, as I've already said, and is the entire reason we
have ->can_attach() functions for each cgroup.

Also see Paul Menage's suggestion for only isolating this fix to cpusets
as well at
http://lkml.indiana.edu/hypermail/linux/kernel/1110.2/01280.html.

Thanks.
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/