[Users] Can't open /sys/fs/cgroup/ve/$UUID/ve.state for writing: Permission denied

[Alkaid]

I am using Centos7+vzkernel+...
When creating ostemplate, it always creates an temporary container to
download and install packages. But vzctl can't open ve.state with O_WRONLY,
result is EACCES ( Permission denied).
cmd: vzpkg create cache centos-6-x86_64, full log is in the attachment

I found an issue on bugs.openvz.org (https://bugs.openvz.org/browse/OVZ-6304),
I wonder why it was treated as "Feature Request" and a "Userspace" problem.

On the same time, everything works fine in the cloudlinux, they have nearly
the same environment
    kernel 3.10.0-123.1.2.vz7.5.29
    vzctl v.7.0.60-1.vz7
    libvzctl-7.0.89-1.1.vz7.x86_64
    vztt-7.0.22-1.vz7.x86_64
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openvz.org/pipermail/users/attachments/20150818/6ca30776/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: stdout
Type: application/octet-stream
Size: 2468 bytes
Desc: not available
URL: <http://lists.openvz.org/pipermail/users/attachments/20150818/6ca30776/attachment.obj>