diff --git a/kernel/cgroup.c b/kernel/cgroup.c index f3d6f30c8cd1..b90316504417 100644 --- a/kernel/cgroup.c +++ b/kernel/cgroup.c @@ -1723,6 +1723,7 @@ int cgroup_attach_task(struct cgroup *cgrp, struct task_struct *tsk) */ failed_ss = ss; goto out; + } } else if (!capable(CAP_SYS_ADMIN)) { const struct cred *cred = current_cred(), *tcred;