30  * exception list locking rules:
165  * dev_exception_clean - frees all entries of the exception list
166  * @dev_cgroup: dev_cgroup with the exception list to be cleaned
315  * match_exception	- iterates the exception list trying to find a complete match
322  * It is considered a complete match if an exception is found that will
325  * Return: true in case it matches an exception completely
341 		/* provided access cannot have more than the exception rule */  in match_exception()
350  * match_exception_partial - iterates the exception list trying to find a partial match
357  * It is considered a partial match if an exception's range is found to
360  * any of the exception list.
362  * Return: true in case the provided range mat matches an exception completely
376 		 * We must be sure that both the exception and the provided  in match_exception_partial()
385 		 * an exception, all its access bits shouldn't match the  in match_exception_partial()
386 		 * exception's access bits  in match_exception_partial()
396  * verify_new_ex - verifies if a new exception is allowed by parent cgroup's permissions
398  * @refex: new exception
399  * @behavior: behavior of the exception's dev_cgroup
417 			 * new exception in the child doesn't matter, only  in verify_new_ex()
423 			 * new exception in the child will add more devices  in verify_new_ex()
440 		 * the new exception will add access to more devices and must  in verify_new_ex()
441 		 * be contained completely in an parent's exception to be  in verify_new_ex()
449 			/* parent has an exception that matches the proposed */  in verify_new_ex()
459  * when adding a new allow rule to a device exception list, the rule
473  * parent_allows_removal - verify if it's ok to remove an exception
474  * @childcg: child cgroup from where the exception will be removed
475  * @ex: exception being removed
477  * When removing an exception in cgroups with default ALLOW policy, it must
481  * Return: true if it's ok to remove exception, false otherwise
496 	 * Make sure you're not removing part or a whole exception existing in  in parent_allows_removal()
517  * revalidate_active_exceptions - walks through the active exception list and
526  * exceptions due to a parent's exception change.
542  * propagate_exception - propagates a new exception to the children
543  * @devcg_root: device cgroup that added a new exception
544  * @ex: new exception to be propagated
572 		 * restriction means adding to the exception list  in propagate_exception()
584 			 * the exception will be removed  in propagate_exception()
598  * Modify the exception list using allow/deny rules.
601  * modify the exception list.
604  * device exception list controls, but for now we'll stick with CAP_SYS_ADMIN
747 		 * an matching exception instead. And be silent about it: we  in devcgroup_update_access()
765 		 * an matching exception instead. And be silent about it: we  in devcgroup_update_access()
845 		/* Need to match completely one exception to be allowed */  in devcgroup_legacy_check_permission()