Fix CVE-2022-0492 for OLK-5.10

The cgroup release_agent is called with call_usermodehelper. The function
call_usermodehelper starts the release_agent with a full set fo capabilities.
Therefore require capabilities when setting the release_agaent.

Hi lujialin2, welcome to the openEuler Community.
I'm the Bot here serving you. You can find the instructions on how to interact with me at Here.
If you have any questions, please contact the SIG: Kernel, and any of the maintainers: @YangYingliang , @pi3orama , @成坚 (CHENG Jian) , @Qiuuuuu , @zhengzengkai , @Xie XiuQi

诚邀Issue的创建人，负责人，协作人以及评论人对此次Issue解决过程给予评价：

0 1 2 3 4 5 6 7 8 9 10

不满意非常满意

GVP openEuler / kernel

内容风险标识

评论 (2)

0 1 2 3 4 5 6 7 8 9 10

GVPopenEuler / kernel

内容风险标识