tree 270b0212f0501b2dcf927e92e7374aba79c909df
parent cc9cb219aac24ffc711566c8f372c2b3a3bf840f
author Pavel Emelyanov <xemul@openvz.org> 1212731187 -0700
committer Linus Torvalds <torvalds@linux-foundation.org> 1212776951 -0700

devscgroup: check for device permissions at mount time

Currently even if a task sits in an all-denied cgroup it can still mount
any block device in any mode it wants.

Put a proper check in do_open for block device to prevent this.

Signed-off-by: Pavel Emelyanov <xemul@openvz.org>
Acked-by: Serge Hallyn <serue@us.ibm.com>
Tested-by: Serge Hallyn <serue@us.ibm.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>