X-Git-Url: https://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?a=blobdiff_plain;f=src%2Fcore%2Fmount-setup.c;h=fe50fb19dae7b54a717099905e90655dcc7d4778;hb=8e70580bb07ae46dc0b0bf377de6333540668acc;hp=ce10be944a1133057ffd4b71ff58f94f1ad47087;hpb=66e411811b8090d1bfd6620fc84472d83f723fa1;p=elogind.git

diff --git a/src/core/mount-setup.c b/src/core/mount-setup.c
index ce10be944..fe50fb19d 100644
--- a/src/core/mount-setup.c
+++ b/src/core/mount-setup.c
@@ -315,6 +315,7 @@ int mount_cgroup_controllers(char ***join_controllers) {
                 p.type = "cgroup";
                 p.options = options;
                 p.flags = MS_NOSUID|MS_NOEXEC|MS_NODEV;
+                p.mode = MNT_IN_CONTAINER;
 
                 r = mount_one(&p, true);
                 free(controller);
@@ -447,6 +448,7 @@ int mount_setup(bool loaded_policy) {
          * systemd. */
         mkdir_label("/run/systemd", 0755);
         mkdir_label("/run/systemd/system", 0755);
+        mkdir_label("/run/systemd/inaccessible", 0000);
 
         return 0;
 }