On 9/24/07, Pavel Emelyanov <xemul@openvz.org> wrote:
>
>  # /bin/echo -n '+1:5' > /cont/devs/0/devices.char
>
> More generally, the '+<major>:<minor>' string grants access to
> some device, and '-<major>:<minor>' disables one.

How about a more forward-compatible API:

<major>:<minor>=<permissions>[,<remapped_major>:<remapped_minor>]

This would allow you the control the access that each cgroup has to a
given device (permissions of 0 indicates that the device isn't even
visible, i.e. the same as your "-<major>:<minor>" operation. For now
specifying the (optional) remapping could just fail, but at least the
API would be defined.

Paul
_______________________________________________
Containers mailing list
Containers@lists.linux-foundation.org
https://lists.linux-foundation.org/mailman/listinfo/containers