tree 097d1e88c4415d9baa3ef35a1ac564a3882643ac
parent 07bec5d57d50e03f90c5f1f5b1a0dd5cfd9d3b00
author Dmitry Torokhov <dtor@chromium.org> 1475795656 -0700
committer Dmitry Shmidt <dimitrysh@google.com> 1485554130 -0800

CHROMIUM: cgroups: relax permissions on moving tasks between cgroups

Android expects system_server to be able to move tasks between different
cgroups/cpusets, but does not want to be running as root. Let's relax
permission check so that processes can move other tasks if they have
CAP_SYS_NICE in the affected task's user namespace.

BUG=b:31790445,chromium:647994
TEST=Boot android container, examine logcat

Change-Id: Ia919c66ab6ed6a6daf7c4cf67feb38b13b1ad09b
Signed-off-by: Dmitry Torokhov <dtor@chromium.org>
Reviewed-on: https://chromium-review.googlesource.com/394927
Reviewed-by: Ricky Zhou <rickyz@chromium.org>