From: Christian Brauner Date: Wed, 4 Dec 2019 13:03:48 +0000 (+0100) Subject: cgroups/devices: correctly verify bpf device useability in cgfsng_devices_activate() X-Git-Tag: lxc-4.0.0~83^2 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=9994db5125538bcabca9239f132280b46fa266c7;p=thirdparty%2Flxc.git cgroups/devices: correctly verify bpf device useability in cgfsng_devices_activate() Signed-off-by: Christian Brauner --- diff --git a/src/lxc/cgroups/cgfsng.c b/src/lxc/cgroups/cgfsng.c index 35763c8ce..5d32c493e 100644 --- a/src/lxc/cgroups/cgfsng.c +++ b/src/lxc/cgroups/cgfsng.c @@ -2771,10 +2771,8 @@ __cgfsng_ops bool cgfsng_devices_activate(struct cgroup_ops *ops, struct lxc_list *it; struct bpf_program *devices_old; - if (!unified) - return false; - - if (lxc_list_empty(&conf->devices)) + if (!unified || !unified->bpf_device_controller || + !unified->container_full_path || lxc_list_empty(&conf->devices)) return true; devices = bpf_program_new(BPF_PROG_TYPE_CGROUP_DEVICE);