29  * exception list locking rules:
153  * dev_exception_clean - frees all entries of the exception list
154  * @dev_cgroup: dev_cgroup with the exception list to be cleaned
303  * match_exception	- iterates the exception list trying to find a complete match
310  * It is considered a complete match if an exception is found that will
313  * Return: true in case it matches an exception completely
329 		/* provided access cannot have more than the exception rule */  in match_exception()
338  * match_exception_partial - iterates the exception list trying to find a partial match
345  * It is considered a partial match if an exception's range is found to
348  * any of the exception list.
350  * Return: true in case the provided range mat matches an exception completely
364 		 * We must be sure that both the exception and the provided  in match_exception_partial()
373 		 * an exception, all its access bits shouldn't match the  in match_exception_partial()
374 		 * exception's access bits  in match_exception_partial()
384  * verify_new_ex - verifies if a new exception is allowed by parent cgroup's permissions
386  * @refex: new exception
387  * @behavior: behavior of the exception's dev_cgroup
405 			 * new exception in the child doesn't matter, only  in verify_new_ex()
411 			 * new exception in the child will add more devices  in verify_new_ex()
428 		 * the new exception will add access to more devices and must  in verify_new_ex()
429 		 * be contained completely in an parent's exception to be  in verify_new_ex()
437 			/* parent has an exception that matches the proposed */  in verify_new_ex()
447  * when adding a new allow rule to a device exception list, the rule
461  * parent_allows_removal - verify if it's ok to remove an exception
462  * @childcg: child cgroup from where the exception will be removed
463  * @ex: exception being removed
465  * When removing an exception in cgroups with default ALLOW policy, it must
469  * Return: true if it's ok to remove exception, false otherwise
484 	 * Make sure you're not removing part or a whole exception existing in  in parent_allows_removal()
505  * revalidate_active_exceptions - walks through the active exception list and
514  * exceptions due to a parent's exception change.
530  * propagate_exception - propagates a new exception to the children
531  * @devcg_root: device cgroup that added a new exception
532  * @ex: new exception to be propagated
560 		 * restriction means adding to the exception list  in propagate_exception()
572 			 * the exception will be removed  in propagate_exception()
586  * Modify the exception list using allow/deny rules.
589  * modify the exception list.
592  * device exception list controls, but for now we'll stick with CAP_SYS_ADMIN
721 		 * an matching exception instead. And be silent about it: we  in devcgroup_update_access()
739 		 * an matching exception instead. And be silent about it: we  in devcgroup_update_access()
820 		/* Need to match completely one exception to be allowed */  in devcgroup_legacy_check_permission()