Comment 20 for bug 1357252

The 'may not create under /run/cgmanager/fs/freezer' errors are caused by the client (session init) cgmanager request "falling through" may_access() in cgmanager.

Here's some debug first from upstart attempting to start a cgroup job by first creating the cgroup:

init:cgroup_create:1172: cgmanager_create_sync(controller='freezer', path='upstart/cgroup-ted-ted') returned -1

This operation failed. Details from the cgmanager server for the cgmanager_create_sync() request:

do_create_main: do_create_main:263: controller='freezer', cgroup='upstart/cgroup-ted-ted', ucred p=(pid=1426, uid=0, gid=0), ucred r=(pid=3786, uid=32011, gid=32011)
do_create_main: do_create_main:315: r.pid=3786, r.uid=32011, r.gid=32011, dirpath='/run/cgmanager/fs/freezer'
may_access: may_access:925: uid=32011, gid=32011, path='/run/cgmanager/fs/freezer', mode=2
may_access: may_access:933
may_access: may_access:939
may_access: may_access:951
may_access: may_access:963
may_access: may_access:975
may_access: may_access:980
may_access: may_access:985
may_access: may_access:990
cgmanager:do_create_main: pid 3786 (uid 32011 gid 32011) may not create under /run/cgmanager/fs/freezer