diff options
| author | Aleksa Sarai <cyphar@cyphar.com> | 2015-06-09 21:32:09 +1000 |
|---|---|---|
| committer | Tejun Heo <tj@kernel.org> | 2015-07-14 17:29:23 -0400 |
| commit | 7e47682ea555e7c1edef1d8fd96e2aa4c12abe59 (patch) | |
| tree | 6012cbc180ae7d633be4ed2ff1f1f6f7f188c1a0 /init | |
| parent | d770e558e21961ad6cfdf0ff7df0eb5d7d4f0754 (diff) | |
| download | lwn-7e47682ea555e7c1edef1d8fd96e2aa4c12abe59.tar.gz lwn-7e47682ea555e7c1edef1d8fd96e2aa4c12abe59.zip | |
cgroup: allow a cgroup subsystem to reject a fork
Add a new cgroup subsystem callback can_fork that conditionally
states whether or not the fork is accepted or rejected by a cgroup
policy. In addition, add a cancel_fork callback so that if an error
occurs later in the forking process, any state modified by can_fork can
be reverted.
Allow for a private opaque pointer to be passed from cgroup_can_fork to
cgroup_post_fork, allowing for the fork state to be stored by each
subsystem separately.
Also add a tagging system for cgroup_subsys.h to allow for CGROUP_<TAG>
enumerations to be be defined and used. In addition, explicitly add a
CGROUP_CANFORK_COUNT macro to make arrays easier to define.
This is in preparation for implementing the pids cgroup subsystem.
Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>
Signed-off-by: Tejun Heo <tj@kernel.org>
Diffstat (limited to 'init')
0 files changed, 0 insertions, 0 deletions