From f8c40ffa39c41c5b3885caa4f3830f0a899ab1d3 Mon Sep 17 00:00:00 2001 From: LiFeng Date: Wed, 7 Feb 2018 11:39:59 -0500 Subject: [PATCH] cgfsng: do MS_REMOUNT Perform MS_REMOUNT on mounts with MS_RDONLY. Signed-off-by: LiFeng Signed-off-by: Christian Brauner --- src/lxc/cgroups/cgfsng.c | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/src/lxc/cgroups/cgfsng.c b/src/lxc/cgroups/cgfsng.c index f4bec7f52..cf165a27b 100644 --- a/src/lxc/cgroups/cgfsng.c +++ b/src/lxc/cgroups/cgfsng.c @@ -1947,6 +1947,15 @@ static int do_secondstage_mounts_if_needed(int type, struct hierarchy *h, cgpath); return -1; } + + if (flags & MS_RDONLY) { + if (mount(sourcepath, cgpath, "cgroup", MS_REMOUNT | flags | MS_RDONLY, NULL) < 0) { + free(sourcepath); + SYSERROR("Error remounting %s read-only", cgpath); + return -1; + } + } + free(sourcepath); INFO("Completed second stage cgroup automounts for %s", cgpath); return 0; -- 2.47.2