]> git.proxmox.com Git - mirror_lxc.git/commit
cgroups: use userns_exec_full() during cgroup removal
authorChristian Brauner <brauner@kernel.org>
Thu, 24 Nov 2022 11:41:04 +0000 (12:41 +0100)
committerChristian Brauner (Microsoft) <christian.brauner@ubuntu.com>
Thu, 24 Nov 2022 11:45:32 +0000 (12:45 +0100)
commit27f69d45bf82abadcbfe7faf3c6ba9b98d901097
tree920e792f967a88daef2e30528b616ec88b127d1c
parent8a494760947f7f1a843ed452f2c67325c6a3ddcd
cgroups: use userns_exec_full() during cgroup removal

When removing cgroups we can't always use the minimal idmap if the user has
specified a specific map for the container instead of just a simple one.
Execute cgroup removal under the full map.

Fixes: https://github.com/lxc/lxd/issues/11108
Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>
src/lxc/cgroups/cgfsng.c