Comment 13 for bug 1508481

It's just that there are dozens of calls to work with:

open
stat
access
bind
truncate
chdir
rename
mkdir
rmdir
creat
link
unlink
symlink
readlink
chmod
chown
lchown
mknod
chroot
setxattr
lsetxattr
getxattr
lgetxattr
listxattr
llistxattr
removexattr
lremovexattr
utimes

Then there's the consequences of an fd to one of these cgroup files or directories being passed to another process and then the f* variants of the above functions getting used. Or the *at variants.

That's what I'm worried about; the patches you've attached here look good, and close a hole you identified, but there's a lot of syscalls that include a lot of error returns.

Thanks