| commit | 7db9cfd380205f6b50afdc3bc3619f876a5eaf0d | [log] [tgz] |
|---|---|---|
| author | Pavel Emelyanov <xemul@openvz.org> | Thu Jun 05 22:46:27 2008 -0700 |
| committer | Linus Torvalds <torvalds@linux-foundation.org> | Fri Jun 06 11:29:11 2008 -0700 |
| tree | 270b0212f0501b2dcf927e92e7374aba79c909df | |
| parent | cc9cb219aac24ffc711566c8f372c2b3a3bf840f [diff] |
devscgroup: check for device permissions at mount time Currently even if a task sits in an all-denied cgroup it can still mount any block device in any mode it wants. Put a proper check in do_open for block device to prevent this. Signed-off-by: Pavel Emelyanov <xemul@openvz.org> Acked-by: Serge Hallyn <serue@us.ibm.com> Tested-by: Serge Hallyn <serue@us.ibm.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>