]> git.ipfire.org Git - thirdparty/lxc.git/commit
cgroups: use userns_exec_full() during cgroup removal
authorChristian Brauner <brauner@kernel.org>
Thu, 24 Nov 2022 11:41:04 +0000 (12:41 +0100)
committerStéphane Graber <stgraber@ubuntu.com>
Fri, 16 Dec 2022 16:36:21 +0000 (11:36 -0500)
commit2662959b8bba3657e5d02025932b0bf8a2f748e9
tree64ae18a02ada76b39279f4b0c6efc86f185ee6f6
parent4dcc84c6b9db37661fefe1b37a4dd6fa3850406c
cgroups: use userns_exec_full() during cgroup removal

When removing cgroups we can't always use the minimal idmap if the user has
specified a specific map for the container instead of just a simple one.
Execute cgroup removal under the full map.

Fixes: https://github.com/lxc/lxd/issues/11108
Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>
src/lxc/cgroups/cgfsng.c