[lxc-devel] [lxc/lxc] 4f875f: cgroups: do not fail if setting devices cgroup fai...

[GitHub]

  Branch: refs/heads/master
  Home:   https://github.com/lxc/lxc
  Commit: 4f875f707ac27d5b398da8093095d2a25518514d
      https://github.com/lxc/lxc/commit/4f875f707ac27d5b398da8093095d2a25518514d
  Author: Serge Hallyn <serge.hallyn at ubuntu.com>
  Date:   2016-02-19 (Fri, 19 Feb 2016)

  Changed paths:
    M src/lxc/cgfs.c
    M src/lxc/cgmanager.c

  Log Message:
  -----------
  cgroups: do not fail if setting devices cgroup fails due to EPERM

If we're trying to allow a device which was denied to our parent
container, just continue.

Cgmanager does not help us to distinguish between eperm and other
errors, so just always continue.

We may want to consider actually computing the range of devices
to which the container monitor has access, but OTOH that introduces
a whole new set of complexity to compute access sets.

Closes #827

Signed-off-by: Serge Hallyn <serge.hallyn at ubuntu.com>


  Commit: b9138559c387424b4a330403588fe9d62a088fef
      https://github.com/lxc/lxc/commit/b9138559c387424b4a330403588fe9d62a088fef
  Author: Stéphane Graber <stgraber at stgraber.org>
  Date:   2016-02-19 (Fri, 19 Feb 2016)

  Changed paths:
    M src/lxc/cgfs.c
    M src/lxc/cgmanager.c

  Log Message:
  -----------
  Merge pull request #829 from hallyn/2016-02-19/devices

cgroups: do not fail if setting devices cgroup fails due to EPERM


Compare: https://github.com/lxc/lxc/compare/ef95dc011ed1...b9138559c387