From a566f76fc2cdfee3771822d406323fa42be896e4 Mon Sep 17 00:00:00 2001 From: LiFeng Date: Wed, 7 Feb 2018 11:39:59 -0500 Subject: [PATCH] cgfsng: do MS_REMOUNT Perform MS_REMOUNT on mounts with MS_RDONLY. Signed-off-by: LiFeng Signed-off-by: Christian Brauner --- src/lxc/cgroups/cgfsng.c | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/src/lxc/cgroups/cgfsng.c b/src/lxc/cgroups/cgfsng.c index 9314f727d..03a36d4d5 100644 --- a/src/lxc/cgroups/cgfsng.c +++ b/src/lxc/cgroups/cgfsng.c @@ -1926,6 +1926,15 @@ static int do_secondstage_mounts_if_needed(int type, struct hierarchy *h, cgpath); return -1; } + + if (flags & MS_RDONLY) { + if (mount(sourcepath, cgpath, "cgroup", MS_REMOUNT | flags | MS_RDONLY, NULL) < 0) { + free(sourcepath); + SYSERROR("Error remounting %s read-only", cgpath); + return -1; + } + } + free(sourcepath); INFO("Completed second stage cgroup automounts for %s", cgpath); return 0; -- 2.47.2