Revert "[RFC]cgroup: Change from CAP_SYS_NICE to CAP_SYS_RESOURCE for cgroup migration permissions"

This reverts commit 64f0245f31.

Needs to be reverted since system_server no longer has CAP_SYS_RESOURCE.

Change-Id: Ic500cffb14b80a3e2a5dd41fda0b0b781b5245d6
This commit is contained in:
Todd Kjos 2017-04-25 18:30:45 +00:00
parent b834e92977
commit d77312aeb2

View file

@ -2689,7 +2689,7 @@ static int cgroup_procs_write_permission(struct task_struct *task,
if (!uid_eq(cred->euid, GLOBAL_ROOT_UID) &&
!uid_eq(cred->euid, tcred->uid) &&
!uid_eq(cred->euid, tcred->suid) &&
!ns_capable(tcred->user_ns, CAP_SYS_RESOURCE))
!ns_capable(tcred->user_ns, CAP_SYS_NICE))
ret = -EACCES;
if (!ret && cgroup_on_dfl(dst_cgrp)) {