emo/openrc
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix permission checks for cgroups

Browse Source 
This is needed because containers may give read access to cgroups but
not allow the settings to be changed.
This commit is contained in:
William Hubbs 2016-09-14 11:08:48 -05:00
parent a4e0d675e1
commit c4d7e02abd
1 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
sh/rc-cgroup.sh.in
View File

@ -53,7 +53,7 @@ cgroup_set_values()
while [ -n "$1" -a "$controller" != "cpuacct" ]; do while [ -n "$1" -a "$controller" != "cpuacct" ]; do
case "$1" in case "$1" in
$controller.*) $controller.*)
if [ -n "$name" -a -f "$cgroup/$name" -a -n "$val" ]; then if [ -n "$name" -a -w "$cgroup/$name" -a -n "$val" ]; then
veinfo "$RC_SVCNAME: Setting $cgroup/$name to $val" veinfo "$RC_SVCNAME: Setting $cgroup/$name to $val"
printf "%s" "$val" > "$cgroup/$name" printf "%s" "$val" > "$cgroup/$name"
fi fi
@ -68,12 +68,12 @@ cgroup_set_values()
esac esac
shift shift
done done
if [ -n "$name" -a -f "$cgroup/$name" -a -n "$val" ]; then if [ -n "$name" -a -w "$cgroup/$name" -a -n "$val" ]; then
veinfo "$RC_SVCNAME: Setting $cgroup/$name to $val" veinfo "$RC_SVCNAME: Setting $cgroup/$name to $val"
printf "%s" "$val" > "$cgroup/$name" printf "%s" "$val" > "$cgroup/$name"
fi fi
if [ -f "$cgroup/tasks" ]; then if [ -w "$cgroup/tasks" ]; then
veinfo "$RC_SVCNAME: adding to $cgroup/tasks" veinfo "$RC_SVCNAME: adding to $cgroup/tasks"
printf "%d" 0 > "$cgroup/tasks" printf "%d" 0 > "$cgroup/tasks"
fi fi
@ -88,14 +88,14 @@ cgroup_add_service()
# cgroups. But may lead to a problems where that inheriting # cgroups. But may lead to a problems where that inheriting
# is needed. # is needed.
for d in /sys/fs/cgroup/* ; do for d in /sys/fs/cgroup/* ; do
[ -f "${d}"/tasks ] && printf "%d" 0 > "${d}"/tasks [ -w "${d}"/tasks ] && printf "%d" 0 > "${d}"/tasks
done done
openrc_cgroup=/sys/fs/cgroup/openrc openrc_cgroup=/sys/fs/cgroup/openrc
if [ -d "$openrc_cgroup" ]; then if [ -d "$openrc_cgroup" ]; then
cgroup="$openrc_cgroup/$RC_SVCNAME" cgroup="$openrc_cgroup/$RC_SVCNAME"
mkdir -p "$cgroup" mkdir -p "$cgroup"
[ -f "$cgroup/tasks" ] && printf "%d" 0 > "$cgroup/tasks" [ -w "$cgroup/tasks" ] && printf "%d" 0 > "$cgroup/tasks"
fi fi
} }