-
cgroups: handle older kernels (e.g. v4.9) · d1783ef4Christian Brauner authored
On olders kernels the restrictions to move processes between cgroups are different than they are on newer kernels. Specifically, we're running into the following check: if (!uid_eq(cred->euid, GLOBAL_ROOT_UID) && !uid_eq(cred->euid, tcred->uid) && !uid_eq(cred->euid, tcred->suid)) ret = -EACCES; which dictates that in order to move a process into a cgroup one either needs to be global root (no restrictions apply) or the effective uid of the process trying to move the process and the {saved}uid of the process that is supposed to be moved need to be identical. The new attaching logic we did didn't fulfill this criterion for because it's not present on new kernels. Closes https://github.com/lxc/lxd/issues/7104. Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
| Name |
Last commit
|
Last update |
|---|---|---|
| .. | ||
| include | Loading commit data... | |
| lxc | Loading commit data... | |
| tests | Loading commit data... | |
| Makefile.am | Loading commit data... |