Re: [PATCH cgroup/for-3.16] cgroup: disallow debug controller on the default hierarchy

2014-05-19 Thread Tejun Heo
On Wed, May 14, 2014 at 07:33:07PM -0400, Tejun Heo wrote: > The debug controller, as its name suggests, exposes cgroup core > internals to userland to aid debugging. Unfortunately, except for the > name, there's no provision to prevent its usage in production > configurations and the controller i

[PATCH cgroup/for-3.16] cgroup: disallow debug controller on the default hierarchy

2014-05-14 Thread Tejun Heo
The debug controller, as its name suggests, exposes cgroup core internals to userland to aid debugging. Unfortunately, except for the name, there's no provision to prevent its usage in production configurations and the controller is widely enabled and mounted leaking internal details to userland.