mirror of
https://github.com/morgan9e/systemd
synced 2026-04-15 00:47:10 +09:00
d4bdcecaf9
We enable nsdelegate for cgroupfs, and hence the kernel would
always refuse writes to /sys/fs/cgroup/cgroup.pressure and friends
regardless of whether the cgns is owned by userns:
cb82ca1539/kernel/cgroup/cgroup.c (L4132)
This currently works because the mountns (thus cgroupfs) remains
to be non-delegated and we're actually operating on the real root
cgroup.
It appears that cgroupfs generally doesn't care about userns,
so I'm yet to see a way to test this properly. Let's drop this for now,
to unblock fixes in the following commits.