On Mon, Nov 23, 2015 at 12:51:49PM +0300, Andrey Ryabinin wrote:
> Global root is allowed to exceed memlock limit, so this should be
> allowed for container's root too.
> capable() works only for global root, so use ve_capable() instead.
>
> Signed-off-by: Andrey Ryabinin
Reviewed-by: Vladimir D
On 11/23/2015 12:51 PM, Andrey Ryabinin wrote:
> Global root is allowed to exceed memlock limit, so this should be
> allowed for container's root too.
> capable() works only for global root, so use ve_capable() instead.
>
https://jira.sw.ru/browse/PSBM-41405
> Signed-off-by: Andrey Ryabinin
> -
Global root is allowed to exceed memlock limit, so this should be
allowed for container's root too.
capable() works only for global root, so use ve_capable() instead.
Signed-off-by: Andrey Ryabinin
---
mm/mlock.c | 8
mm/mmap.c | 6 +++---
mm/mremap.c | 2 +-
3 files changed, 8 inser
