Hello,
On Tue, Oct 18, 2016 at 09:54:37AM -0700, John Stultz wrote:
quoted
Also, CAP_SYS_RESOURCE deserves consideration (34 uses in capable()
checks). I'd say, since cgroups are about resources, so there's
something of a match there., so it's also worth considering.
I'll try to look into CAP_SYS_RESOURCE.
Colin/Todd: Any objection from the Android side on CAP_SYS_RESOURCE?
(Or we could just create a new 512bit CAP2_ capabilities interface! :P)
FWIW, if CAP_SYS_RESOURCE works, I'd be happy with that.
Thanks.
--
tejun