picnoir
/
Systemd
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

core: grant user@.service instances write access to their own cgroup

This commit is contained in:
Lennart Poettering 2013-07-11 01:56:12 +02:00
parent befb5b6a71
commit 8aa7519366
1 changed files with 17 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
src/core/execute.c
View File

@ -1258,6 +1258,23 @@ int exec_spawn(ExecCommand *command,
}
}
#ifdef HAVE_PAM
if (cgroup_path && context->user && context->pam_name) {
err = cg_set_task_access(SYSTEMD_CGROUP_CONTROLLER, cgroup_path, 0644, uid, gid);
if (err < 0) {
r = EXIT_CGROUP;
goto fail_child;
}
err = cg_set_group_access(SYSTEMD_CGROUP_CONTROLLER, cgroup_path, 0755, uid, gid);
if (err < 0) {
r = EXIT_CGROUP;
goto fail_child;
}
}
#endif
if (apply_permissions) {
err = enforce_groups(context, username, gid);
if (err < 0) {