v3:
 - Drop patch 3
 - Further simplify patch 2 by dropping the flag and only check for
   v1 cpuset with no CPU to disable security check.

v2:
  - Add a new CS_TASKS_OUT flag to signal that task migration out of
    empty cpuset is allowed without setsched security check as suggested
    by Tejun.
  - Add 2 more patches with minor changes.

As it is found that the cpuset v1 task migration out of cpuset with no
CPU can be blocked by a strict security policy, we need to work around
that issue by treating it as an exceptional case that is allowed without
security check in cpuset_can_attach().

Waiman Long (2):
  cgroup/cpuset: Simplify setsched decision check in task iteration loop
    of cpuset_can_attach()
  cgroup/cpuset: Skip security check for hotplug induced v1 task
    migration

 kernel/cgroup/cpuset.c | 29 ++++++++++++++++++++---------
 1 file changed, 20 insertions(+), 9 deletions(-)

-- 
2.53.0

Hello,

> Waiman Long (2):
>   cgroup/cpuset: Simplify setsched decision check in task iteration loop
>     of cpuset_can_attach()
>   cgroup/cpuset: Skip security check for hotplug induced v1 task
>     migration

Applied 1-2 to cgroup/for-7.0-fixes with a s/EACCESS/EACCES/ typo fix
in the second patch's commit message.

Thanks.

--
tejun