]> git.ipfire.org Git - thirdparty/lxc.git/commit
cgroups: populate hierarchy for device cgroup
authorStoiko Ivanov <s.ivanov@proxmox.com>
Mon, 19 Jul 2021 14:55:43 +0000 (16:55 +0200)
committerStoiko Ivanov <s.ivanov@proxmox.com>
Tue, 20 Jul 2021 10:04:35 +0000 (12:04 +0200)
commit60052c3be7ea39832fb95b96e26215ed3bc35f6b
tree415c4099396f52815b855458528e120145f73a00
parent0a755306618f7f0aa450d439c34a86d8c8683682
cgroups: populate hierarchy for device cgroup

With the changes introduced in:
b7b1e3a34ce28b01206c48227930ff83d399e7b6
the hierarchy-struct did not have the path_lim set anymore, which is
needed by setup_limits_legacy (->cg_legacy_set_data->lxc_write_openat)
to actually access the cgroup directory.

The issue can be reproduced with a container config having
```
lxc.cgroup.devices.deny = a
```
(or any lxc.cgroup.devices entry) set on a system booted with
systemd.unified_cgroup_hierarchy=0.

This affects all privileged containers on PVE (due to the default
devices.deny entry).

Signed-off-by: Stoiko Ivanov <s.ivanov@proxmox.com>
src/lxc/cgroups/cgfsng.c