device_cgroup: Export devcgroup_check_permission
authorHarish Kasiviswanathan <Harish.Kasiviswanathan@amd.com>
Thu, 16 May 2019 15:37:16 +0000 (11:37 -0400)
committerAlex Deucher <alexander.deucher@amd.com>
Mon, 7 Oct 2019 20:11:38 +0000 (15:11 -0500)
commit4b7d4d453fc46769394e31d1cb19088f49897b59
treeb485d348084855efa543562edf5f157a36e7f3f8
parenta3e520a25ce85f84a7f589af2b6ec38af96caa12
device_cgroup: Export devcgroup_check_permission

For AMD compute (amdkfd) driver.

All AMD compute devices are exported via single device node /dev/kfd. As
a result devices cannot be controlled individually using device cgroup.

AMD compute devices will rely on its graphics counterpart that exposes
/dev/dri/renderN node for each device. For each task (based on its
cgroup), KFD driver will check if /dev/dri/renderN node is accessible
before exposing it.

Signed-off-by: Harish Kasiviswanathan <Harish.Kasiviswanathan@amd.com>
Acked-by: Tejun Heo <tj@kernel.org>
Acked-by: Felix Kuehling <Felix.Kuehling@amd.com>
Reviewed-by: Roman Gushchin <guro@fb.com>
Signed-off-by: Alex Deucher <alexander.deucher@amd.com>
include/linux/device_cgroup.h
security/device_cgroup.c