[Devel] [PATCH RH7 1/2] cgroup: prohibit access to toplevel cgroup in CT

Cyrill Gorcunov gorcunov at virtuozzo.com
Mon Mar 21 07:08:44 PDT 2016


On Mon, Mar 21, 2016 at 04:54:40PM +0300, Pavel Tikhomirov wrote:
> To allow write access to top-level cgroup e.g. on CT start and resume
> one need to enable ve.pseudosuper, appropriate patch sent to libvzctl.
> 
> libvzctl pull request:
> https://src.openvz.org/projects/OVZ/repos/libvzctl/pull-requests/50/
> 
> https://jira.sw.ru/browse/PSBM-44981
> Signed-off-by: Pavel Tikhomirov <ptikhomirov at virtuozzo.com>
Acked-by: Cyrill Gorcunov <gorcunov at openvz.org>

This requires libvzctl to be updated first 'cause otherwise
container won't start. Thus make sure libvzctl is updated
then we're safe to merge it.


More information about the Devel mailing list