Pavel Emelyanov 7db9cfd380 devscgroup: check for device permissions at mount time
Currently even if a task sits in an all-denied cgroup it can still mount
any block device in any mode it wants.

Put a proper check in do_open for block device to prevent this.

Signed-off-by: Pavel Emelyanov <xemul@openvz.org>
Acked-by: Serge Hallyn <serue@us.ibm.com>
Tested-by: Serge Hallyn <serue@us.ibm.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2008-06-06 11:29:11 -07:00
..
2008-05-14 19:23:27 -05:00
2008-05-01 08:04:01 -07:00
2008-04-29 08:06:04 -07:00
2008-05-19 15:37:27 -05:00
2008-04-29 08:06:00 -07:00
2008-05-24 09:56:07 -07:00
2008-04-30 08:29:52 -07:00
2008-05-21 16:55:58 -07:00
2008-04-29 08:06:18 -07:00
2008-05-24 09:56:08 -07:00
2008-04-30 08:29:51 -07:00
2008-04-30 08:29:52 -07:00
2008-04-29 08:06:17 -07:00
2008-05-07 18:35:03 +02:00
2008-04-30 08:29:47 -07:00
2008-05-01 13:08:16 -04:00
2008-05-01 13:08:50 -04:00
2008-05-01 13:08:16 -04:00
2008-05-01 13:08:16 -04:00
2008-05-06 13:13:37 -07:00
2008-04-29 08:06:00 -07:00
2008-04-30 13:38:47 +02:00
2008-06-06 11:29:08 -07:00
2008-06-06 11:29:11 -07:00
2008-05-01 13:08:16 -04:00
2008-05-08 10:46:56 -07:00
2008-04-30 08:29:51 -07:00
2008-05-01 13:08:16 -04:00
2008-05-01 13:08:50 -04:00
2008-04-29 08:06:00 -07:00
2008-05-01 13:08:50 -04:00