30  * exception list locking rules:
165  * dev_exception_clean - frees all entries of the exception list
166  * @dev_cgroup: dev_cgroup with the exception list to be cleaned
309  * match_exception	- iterates the exception list trying to find a complete match
316  * It is considered a complete match if an exception is found that will
319  * Return: true in case it matches an exception completely
335 		/* provided access cannot have more than the exception rule */  in match_exception()
344  * match_exception_partial - iterates the exception list trying to find a partial match
351  * It is considered a partial match if an exception's range is found to
354  * any of the exception list.
356  * Return: true in case the provided range mat matches an exception completely
370 		 * We must be sure that both the exception and the provided  in match_exception_partial()
379 		 * an exception, all its access bits shouldn't match the  in match_exception_partial()
380 		 * exception's access bits  in match_exception_partial()
390  * verify_new_ex - verifies if a new exception is allowed by parent cgroup's permissions
392  * @refex: new exception
393  * @behavior: behavior of the exception's dev_cgroup
411 			 * new exception in the child doesn't matter, only  in verify_new_ex()
417 			 * new exception in the child will add more devices  in verify_new_ex()
434 		 * the new exception will add access to more devices and must  in verify_new_ex()
435 		 * be contained completely in an parent's exception to be  in verify_new_ex()
443 			/* parent has an exception that matches the proposed */  in verify_new_ex()
453  * when adding a new allow rule to a device exception list, the rule
467  * parent_allows_removal - verify if it's ok to remove an exception
468  * @childcg: child cgroup from where the exception will be removed
469  * @ex: exception being removed
471  * When removing an exception in cgroups with default ALLOW policy, it must
475  * Return: true if it's ok to remove exception, false otherwise
490 	 * Make sure you're not removing part or a whole exception existing in  in parent_allows_removal()
511  * revalidate_active_exceptions - walks through the active exception list and
520  * exceptions due to a parent's exception change.
536  * propagate_exception - propagates a new exception to the children
537  * @devcg_root: device cgroup that added a new exception
538  * @ex: new exception to be propagated
566 		 * restriction means adding to the exception list  in propagate_exception()
578 			 * the exception will be removed  in propagate_exception()
592  * Modify the exception list using allow/deny rules.
595  * modify the exception list.
598  * device exception list controls, but for now we'll stick with CAP_SYS_ADMIN
741 		 * an matching exception instead. And be silent about it: we  in devcgroup_update_access()
759 		 * an matching exception instead. And be silent about it: we  in devcgroup_update_access()
839 		/* Need to match completely one exception to be allowed */  in devcgroup_legacy_check_permission()