conf: the atime flags are locked in userns

src/lxc/conf.c

@@ -609,9 +609,6 @@ unsigned long add_required_remount_flags(const char *s, const char *d,
 	struct statvfs sb;
 	unsigned long required_flags = 0;
 
-	if (!(flags & MS_REMOUNT))
-		return flags;
-
 	if (!s)
 		s = d;
 
@@ -622,6 +619,7 @@ unsigned long add_required_remount_flags(const char *s, const char *d,
 	if (ret < 0)
 		return flags;
 
+	if (flags & MS_REMOUNT) {
 		if (sb.f_flag & MS_NOSUID)
 			required_flags |= MS_NOSUID;
 		if (sb.f_flag & MS_NODEV)
@@ -630,6 +628,18 @@ unsigned long add_required_remount_flags(const char *s, const char *d,
 			required_flags |= MS_RDONLY;
 		if (sb.f_flag & MS_NOEXEC)
 			required_flags |= MS_NOEXEC;
+	}
+
+	if (sb.f_flag & MS_NOATIME)
+		required_flags |= MS_NOATIME;
+	if (sb.f_flag & MS_NODIRATIME)
+		required_flags |= MS_NODIRATIME;
+	if (sb.f_flag & MS_LAZYTIME)
+		required_flags |= MS_LAZYTIME;
+	if (sb.f_flag & MS_RELATIME)
+		required_flags |= MS_RELATIME;
+	if (sb.f_flag & MS_STRICTATIME)
+		required_flags |= MS_STRICTATIME;
 
 	return flags | required_flags;
 #else