On Wed 25-05-11 15:27:14, Michal Hocko wrote:
> On Thu 19-05-11 14:44:17, Balbir Singh wrote:
> > * Michal Hocko <mho...@suse.cz> [2011-05-19 10:59:29]:
> > 
> > > On Tue 17-05-11 19:31:21, Dhaval Giani wrote:
> > > > On Tue, May 17, 2011 at 6:09 PM, Michal Hocko <mho...@suse.cz> wrote:
> > > > > On Tue 17-05-11 12:57:11, Jan Safranek wrote:
> > > > >> On 05/16/2011 02:07 PM, Michal Hocko wrote:
> > > > > [...]
> > > > >> > The patch checks whether uid differs from gid either for task or 
> > > > >> > admin
> > > > >> > and automatically changes the file and directory permissions to be 
> > > > >> > user
> > > > >> > and group read&write (and executable for directories).
> > > > >>
> > > > >> Why is gid and uid compared together?
> > > > >
> > > > > The point is that if you specigy different gui than uid you are doing
> > > > > that probably because you want to grant access to that group which is
> > > > > not possible without group permissions. My cgroups tools are not 
> > > > > setuid
> > > > > so I cannot use cgexec to any groups with this layout.
> > > > >
> > > > 
> > > > That still does not mean that the uid and gid can be directly
> > > > compared, and if there is even a direct relationship. You have to
> > > > setup the group permissions regardless.
> > > 
> > > So if I understand you correctly, you are saying that if I want to use
> > > libcgroup package and its tools I have to setup permissions manually?
> > > If that is the case then I would consider the commit which changes the
> > > permissions setting as regression. 
> > > 
> > > SLE11-SP1 uses libcgroup 0.34 where I can use cgexec without any issues,
> > > OpenSUSE 11.3 has 0.36 is safe as well. Debian (current testing)
> > > has 0.37.1 (which contains fa3d180b) doesn't work that way anymore.
> > > 
> > > Please note that the solution proposed here is just a workaround. I do
> > > not like it as well. If you guys say that the the stable release can
> > > introduce configuration enhancements then I am fine with the perm
> > > setting in configuration as well. I am almost ready with it.
> > 
> > I am OK with a work around, simply because we had some form of it
> > before. The configuration enhancements can happen as a follow up.
> > 
> > What do others feel?
> 
> Any follow up for this?

OK, it seems that there is no motivation in changing the behavior. I
have downgraded to 0.36 which works sufficiently well for me. I hope
that the other permissions handling patch set gets into he code soon.

-- 
Michal Hocko
SUSE Labs
SUSE LINUX s.r.o.
Lihovarska 1060/12
190 00 Praha 9    
Czech Republic

------------------------------------------------------------------------------
Simplify data backup and recovery for your virtual environment with vRanger. 
Installation's a snap, and flexible recovery options mean your data is safe,
secure and there when you need it. Data protection magic?
Nope - It's vRanger. Get your free trial download today. 
http://p.sf.net/sfu/quest-sfdev2dev
_______________________________________________
Libcg-devel mailing list
Libcg-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/libcg-devel

Reply via email to