From: Pavel Emelyanov <xemul@openvz.org>
Date: Fri, 6 Jun 2008 05:46:27 +0000 (-0700)
Subject: devscgroup: check for device permissions at mount time
X-Git-Tag: v2.6.26-rc6~63
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=7db9cfd380205f6b50afdc3bc3619f876a5eaf0d;p=pandora-kernel.git

devscgroup: check for device permissions at mount time

Currently even if a task sits in an all-denied cgroup it can still mount
any block device in any mode it wants.

Put a proper check in do_open for block device to prevent this.

Signed-off-by: Pavel Emelyanov <xemul@openvz.org>
Acked-by: Serge Hallyn <serue@us.ibm.com>
Tested-by: Serge Hallyn <serue@us.ibm.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
---

Reading git-diff-tree failed