This is an automated email from the ASF dual-hosted git repository.

bmahler pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/mesos.git

commit fd17efe3402fc859efc63d3cd32658d1ec61a015
Author: Benjamin Mahler <[email protected]>
AuthorDate: Fri Jul 26 16:34:34 2024 -0400

    [cgroups2] Clarify device documentation.
---
 src/linux/cgroups2.hpp | 12 +++++++-----
 1 file changed, 7 insertions(+), 5 deletions(-)

diff --git a/src/linux/cgroups2.hpp b/src/linux/cgroups2.hpp
index a814bc03c..a06534432 100644
--- a/src/linux/cgroups2.hpp
+++ b/src/linux/cgroups2.hpp
@@ -436,13 +436,15 @@ using cgroups::devices::Entry;
 // For access to be granted, the requested access must match an entry in the
 // allow list, and not match with any entry on the deny list. If the device
 // type, major, minor numbers match with an entry on the deny list, there must
-// be no overlap between the requested access and the deny entry's accesses
+// be no overlap between the requested access and the deny entry's accesses.
 //
 // We additionally enforce the following constraints on both allow and deny:
-// 1. No Entry can have no accesses specified
-// 2. No two entries on the same list can have the same type, major & minor
-//    numbers.
-// 3. No two entries on the same list can be encompassed by the other entry.
+//
+//   1. Entries must not have empty accesses specified.
+//   2. No two entries on the same list can have the same selector
+//      (type, major & minor numbers).
+//   3. No two entries on the same list can be encompassed by the other entry
+//      (See Entry::encompassed).
 Try<Nothing> configure(
     const std::string& cgroup,
     const std::vector<Entry>& allow,

Reply via email to