]> git.proxmox.com Git - mirror_lxc.git/commit
cgroups: enable container without CAP_SYS_ADMIN
authorChristian Brauner <christian.brauner@ubuntu.com>
Mon, 30 Oct 2017 13:16:46 +0000 (14:16 +0100)
committerChristian Brauner <christian.brauner@ubuntu.com>
Mon, 30 Oct 2017 13:32:40 +0000 (14:32 +0100)
commitb635e92d21d2a4d71a553388f18cfa08f44bf1ba
treee7939ecf55f04f53be4d58f1e8f8ecb2a44966f3
parentcdfe90a49f516b0f1210d181980f14a4765e10da
cgroups: enable container without CAP_SYS_ADMIN

In case cgroup namespaces are supported but we do not have CAP_SYS_ADMIN we
need to mount cgroups for the container. This patch enables both privileged and
unprivileged containers without CAP_SYS_ADMIN.

Closes #1737.

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
src/lxc/cgroups/cgfs.c
src/lxc/cgroups/cgfsng.c
src/lxc/cgroups/cgroup.c
src/lxc/conf.c
src/lxc/conf.h