| commit | f54fb863c6bbcbafdfc332b4a4260abb5a002137 | [log] [tgz] |
|---|---|---|
| author | Serge Hallyn <serge.hallyn@ubuntu.com> | Tue Jul 23 13:18:53 2013 -0500 |
| committer | Eric W. Biederman <ebiederm@xmission.com> | Fri Aug 30 23:44:09 2013 -0700 |
| tree | ced72284affb914341940a5f854e4d2dd56622d1 | |
| parent | 6e556ce209b09528dbf1931cbfd5d323e1345926 [diff] |
capabilities: allow nice if we are privileged We allow task A to change B's nice level if it has a supserset of B's privileges, or of it has CAP_SYS_NICE. Also allow it if A has CAP_SYS_NICE with respect to B - meaning it is root in the same namespace, or it created B's namespace. Signed-off-by: Serge Hallyn <serge.hallyn@canonical.com> Reviewed-by: "Eric W. Biederman" <ebiederm@xmission.com> Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>