[cgmanager-devel] [cgmanager/cgmanager] f9e8ba: add scm versions of all methods

[GitHub]

  Branch: refs/heads/master
  Home:   https://github.com/cgmanager/cgmanager
  Commit: f9e8bad5e7cd2434041ececb8cb046c87490485d
      https://github.com/cgmanager/cgmanager/commit/f9e8bad5e7cd2434041ececb8cb046c87490485d
  Author: Serge Hallyn <serge.hallyn at ubuntu.com>
  Date:   2013-12-17 (Tue, 17 Dec 2013)

  Changed paths:
    M Makefile
    M cgmanager.c
    M org.linuxcontainers.cgmanager.xml
    M tests/test02.sh

  Log Message:
  -----------
  add scm versions of all methods

In these, the proxy passes the requestor's credentials as an
scm_cred.  The proxy could not do so if it did not have privilege
over the passed creds.

In this way, the proxy doesn't need to do any checking of the
requestor permissions at all, instead deferring wholly to the
manager.

Signed-off-by: Serge Hallyn <serge.hallyn at ubuntu.com>


  Commit: 00adf42f16e6e3aa2fdf4663015f627293df6eae
      https://github.com/cgmanager/cgmanager/commit/00adf42f16e6e3aa2fdf4663015f627293df6eae
  Author: Serge Hallyn <serge.hallyn at ubuntu.com>
  Date:   2013-12-17 (Tue, 17 Dec 2013)

  Changed paths:
    M access_checks.c
    M cgmanager.c
    M chowncgroup.c
    M getpidcgroup.c
    M movepid.c

  Log Message:
  -----------
  movePidScm, getPidCgroupScm, chownCgroupScm: send own cred first

The proxy will forward the requestor's creds so that the manager
can do all access checks.

Signed-off-by: Serge Hallyn <serge.hallyn at ubuntu.com>


Compare: https://github.com/cgmanager/cgmanager/compare/d65380e46b28...00adf42f16e6