[Bug 1421068] [NEW] task can administer some sibling cgroups

[Serge Hallyn]

Public bug reported:

If a task is in cgroup /xxx/yyy, and /xxx/yyy2 exists where the task
owns /xxx/yyy2, then the task can administer /xxx/yyy2, which it should
not be able to

Test case:   The folllowing is supposed to fail:

    cgm create freezer xxx; cgm create freezer xxx2;  base=`cgm
getpidcgroupabs freezer $$`;  cgm movepid freezer xxx $$; cgm getvalue
freezer ${base}/xxx2

** Affects: cgmanager (Ubuntu)
     Importance: High
         Status: In Progress

** Affects: cgmanager (Ubuntu Trusty)
     Importance: High
         Status: New

** Affects: cgmanager (Ubuntu Utopic)
     Importance: High
         Status: New

** Changed in: cgmanager (Ubuntu)
   Importance: Undecided => High

** Changed in: cgmanager (Ubuntu)
       Status: New => In Progress

** Also affects: cgmanager (Ubuntu Utopic)
   Importance: Undecided
       Status: New

** Also affects: cgmanager (Ubuntu Trusty)
   Importance: Undecided
       Status: New

** Changed in: cgmanager (Ubuntu Trusty)
   Importance: Undecided => High

** Changed in: cgmanager (Ubuntu Utopic)
   Importance: Undecided => High

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to cgmanager in Ubuntu.
https://bugs.launchpad.net/bugs/1421068

Title:
  task can administer some sibling cgroups

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/cgmanager/+bug/1421068/+subscriptions