nspawn: when in hybrid mode, chown() both the legacy and the unified hierarchy to the root in the container

If user namespacing is used, let's make sure that the root user in the
container gets access to both /sys/fs/cgroup/systemd and
/sys/fs/cgroup/unified.

This matches similar logic in cg_set_access().
This commit is contained in:
Lennart Poettering
2017-12-05 13:49:13 +01:00
parent 2d3a5a73e0
commit de54e02d5e
3 changed files with 16 additions and 3 deletions
+1 -1
View File
@@ -3619,7 +3619,7 @@ static int run(int master,
return r;
}
r = chown_cgroup(*pid, arg_uid_shift);
r = chown_cgroup(*pid, arg_unified_cgroup_hierarchy, arg_uid_shift);
if (r < 0)
return r;