Re: [libvirt] [PATCH 2/2] lxc: Add virCgroupSetOwner()

Add a new helper function to change the permissions of a control group. Signed-off-by: Richard Weinberger <richard(a)nod.at&gt; --- src/lxc/lxc_controller.c | 7 +++++++ src/util/vircgroup.c | 43 +++++++++++++++++++++++++++++++++++++++++++ src/util/vircgroup.h | 2 ++ 3 files changed, 52 insertions(+) diff --git a/src/lxc/lxc_controller.c b/src/lxc/lxc_controller.c index f7b614b..6e348b3 100644 --- a/src/lxc/lxc_controller.c +++ b/src/lxc/lxc_controller.c @@ -2223,6 +2223,13 @@ virLXCControllerRun(virLXCControllerPtr ctrl) goto cleanup; } + /* setup control group permissions for user namespace */ + if (ctrl->def->idmap.uidmap) { + if (virCgroupSetOwner(ctrl->cgroup, ctrl->def->idmap.uidmap[0].target, + ctrl->def->idmap.gidmap[0].target)) + goto cleanup; + } +

diff --git a/src/util/vircgroup.c b/src/util/vircgroup.c index a6d60c5..b66ffed 100644 --- a/src/util/vircgroup.c +++ b/src/util/vircgroup.c @@ -3252,6 +3252,49 @@ cleanup: return ret; } +int virCgroupSetOwner(virCgroupPtr cgroup, uid_t uid, gid_t gid) { + size_t i; + + for (i = 0; i < VIR_CGROUP_CONTROLLER_LAST; i++) {