[Devel] [PATCH RH7 1/2] cgroup: prohibit access to toplevel cgroup in CT
Cyrill Gorcunov
gorcunov at virtuozzo.com
Mon Mar 21 07:08:44 PDT 2016
On Mon, Mar 21, 2016 at 04:54:40PM +0300, Pavel Tikhomirov wrote:
> To allow write access to top-level cgroup e.g. on CT start and resume
> one need to enable ve.pseudosuper, appropriate patch sent to libvzctl.
>
> libvzctl pull request:
> https://src.openvz.org/projects/OVZ/repos/libvzctl/pull-requests/50/
>
> https://jira.sw.ru/browse/PSBM-44981
> Signed-off-by: Pavel Tikhomirov <ptikhomirov at virtuozzo.com>
Acked-by: Cyrill Gorcunov <gorcunov at openvz.org>
This requires libvzctl to be updated first 'cause otherwise
container won't start. Thus make sure libvzctl is updated
then we're safe to merge it.
More information about the Devel
mailing list