2 * ns_cgroup.c - namespace cgroup subsystem
4 * Copyright 2006, 2007 IBM Corp
7 #include <linux/module.h>
8 #include <linux/cgroup.h>
12 struct cgroup_subsys_state css
;
16 struct cgroup_subsys ns_subsys
;
18 static inline struct ns_cgroup
*cgroup_to_ns(
19 struct cgroup
*cgroup
)
21 return container_of(cgroup_subsys_state(cgroup
, ns_subsys_id
),
22 struct ns_cgroup
, css
);
25 int ns_cgroup_clone(struct task_struct
*task
)
27 return cgroup_clone(task
, &ns_subsys
);
32 * 1. you can only enter a cgroup which is a child of your current
34 * 2. you can only place another process into a cgroup if
35 * a. you have CAP_SYS_ADMIN
36 * b. your cgroup is an ancestor of task's destination cgroup
37 * (hence either you are in the same cgroup as task, or in an
38 * ancestor cgroup thereof)
40 static int ns_can_attach(struct cgroup_subsys
*ss
,
41 struct cgroup
*new_cgroup
, struct task_struct
*task
)
45 if (current
!= task
) {
46 if (!capable(CAP_SYS_ADMIN
))
49 if (!cgroup_is_descendant(new_cgroup
))
53 if (atomic_read(&new_cgroup
->count
) != 0)
56 orig
= task_cgroup(task
, ns_subsys_id
);
57 if (orig
&& orig
!= new_cgroup
->parent
)
64 * Rules: you can only create a cgroup if
65 * 1. you are capable(CAP_SYS_ADMIN)
66 * 2. the target cgroup is a descendant of your own cgroup
68 static struct cgroup_subsys_state
*ns_create(struct cgroup_subsys
*ss
,
69 struct cgroup
*cgroup
)
71 struct ns_cgroup
*ns_cgroup
;
73 if (!capable(CAP_SYS_ADMIN
))
74 return ERR_PTR(-EPERM
);
75 if (!cgroup_is_descendant(cgroup
))
76 return ERR_PTR(-EPERM
);
78 ns_cgroup
= kzalloc(sizeof(*ns_cgroup
), GFP_KERNEL
);
80 return ERR_PTR(-ENOMEM
);
81 spin_lock_init(&ns_cgroup
->lock
);
82 return &ns_cgroup
->css
;
85 static void ns_destroy(struct cgroup_subsys
*ss
,
86 struct cgroup
*cgroup
)
88 struct ns_cgroup
*ns_cgroup
;
90 ns_cgroup
= cgroup_to_ns(cgroup
);
94 struct cgroup_subsys ns_subsys
= {
96 .can_attach
= ns_can_attach
,
98 .destroy
= ns_destroy
,
99 .subsys_id
= ns_subsys_id
,
This page took 0.031327 seconds and 5 git commands to generate.