Comment 7 for bug 1584230

zfs.img definitely should have its permission fixed.

The container path is supposed to be chmod properly when you flip security.privileged so clearly we need to fix that whenever it's not the case.

If we chmod an unprivileged container 700, the container would fail to start as LXC won't be able to access the path. So we can't just do that, otherwise we would have from the start :)