[Bug 253724] FreeBSD 13.0-BETA3: jail: cpuset: setaffinity: Resource deadlock avoided

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=253724

Kyle Evans <kevans at freebsd.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|New                         |In Progress

--- Comment #1 from Kyle Evans <kevans at freebsd.org> ---
Sorry about that; I think this is my preferred method to solve it:
https://reviews.freebsd.org/D28952

The main need that I have is preventing unprivileged users who are restricted
to a subset of available CPUs from bypassing that restriction by attaching
(allowed by MAC policy) to a jail with a wider mask. The patch above restores
the system root's ability to administer such a setup as yours, and allows the
previous behavior entirely (i.e. unprivileged users) with a MAC policy.

-- 
You are receiving this mail because:
You are on the CC list for the bug.