start: pin rootfs when privileged

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

diff --git a/src/lxc/start.c b/src/lxc/start.c
index 3963a406c5a0713b5938ecdd786c18431e90e021..f1b3f8e11d6269115b74998e78c2a0242814a955 100644 (file)
--- a/src/lxc/start.c
+++ b/src/lxc/start.c
@@ -1153,7 +1153,7 @@ static int lxc_spawn(struct lxc_handler *handler)
         * it readonly.
         * If the container is unprivileged then skip rootfs pinning.
         */
-       if (wants_to_map_ids) {
+       if (!wants_to_map_ids) {
                handler->pinfd = pin_rootfs(handler->conf->rootfs.path);
                if (handler->pinfd == -1)
                        INFO("Failed to pin the rootfs for container \"%s\".", handler->name);