DevinLeamy opened a new pull request, #519: URL: https://github.com/apache/mesos/pull/519
Cgroups v2 uses eBPF to manage device access permissions. Device access is configured per-cgroup. For each cgroup, we attach a `BPF_PROG_TYPE_CGROUP_DEVICE` program type to the `BPF_CGROUP_DEVICE` eBPF kernel hook. The attached program will be run for every device access made from within the cgroup. If the program returns a `0` exit code the device access is denied, otherwise it is allowed. For more information about the Device Controller in cgroups v2: https://docs.kernel.org/admin-guide/cgroup-v2.html#device-controller -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
