nspawn: when in hybrid mode, chown() both the legacy and the unified hierarchy to the root in the container
If user namespacing is used, let's make sure that the root user in the container gets access to both /sys/fs/cgroup/systemd and /sys/fs/cgroup/unified. This matches similar logic in cg_set_access().
This commit is contained in:
+1
-1
@@ -3619,7 +3619,7 @@ static int run(int master,
|
||||
return r;
|
||||
}
|
||||
|
||||
r = chown_cgroup(*pid, arg_uid_shift);
|
||||
r = chown_cgroup(*pid, arg_unified_cgroup_hierarchy, arg_uid_shift);
|
||||
if (r < 0)
|
||||
return r;
|
||||
|
||||
|
||||
Reference in New Issue
Block a user