From 85f261dd1eb299be5b82ce7808069c379275b87d Mon Sep 17 00:00:00 2001
From: Lucas Manning <lucasmanning@google.com>
Date: Thu, 29 Dec 2022 13:52:11 -0800
Subject: [PATCH] Pass the containerCgroup to the sandbox object instead of
 parent.

This is a bug reported by #8311. It affects sandboxes where
containerCgroup != parentCgroup.

PiperOrigin-RevId: 498443910
---
 runsc/container/container.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/runsc/container/container.go b/runsc/container/container.go
index 5ab7056c7..632ed98e8 100644
--- a/runsc/container/container.go
+++ b/runsc/container/container.go
@@ -283,7 +283,7 @@ func New(conf *config.Config, args Args) (*Container, error) {
 				UserLog:              args.UserLog,
 				IOFiles:              ioFiles,
 				MountsFile:           specFile,
-				Cgroup:               parentCgroup,
+				Cgroup:               containerCgroup,
 				Attached:             args.Attached,
 				OverlayFilestoreFile: overlayFilestoreFile,
 			}