diff --git a/kernel/sched/core.c b/kernel/sched/core.c index a636832a472a..874011e555fc 100644 --- a/kernel/sched/core.c +++ b/kernel/sched/core.c @@ -7663,6 +7663,12 @@ static int user_check_sched_setscheduler(struct task_struct *p, if (p->sched_reset_on_fork && !reset_on_fork) goto req_priv; + if (!capable(CAP_SYS_NICE)) { + /* Can't change util-clamps */ + if (attr->sched_flags & SCHED_FLAG_UTIL_CLAMP) + return -EPERM; + } + return 0; req_priv: