The 'may not create under /run/cgmanager/fs/freezer' errors are caused by the client (session init) cgmanager request "falling through" may_access() in cgmanager.
Here's some debug first from upstart attempting to start a cgroup job by first creating the cgroup:
init:cgroup_create:1172: cgmanager_create_sync(controller='freezer', path='upstart/cgroup-ted-ted') returned -1
This operation failed. Details from the cgmanager server for the cgmanager_create_sync() request:
The 'may not create under /run/cgmanager/ fs/freezer' errors are caused by the client (session init) cgmanager request "falling through" may_access() in cgmanager.
Here's some debug first from upstart attempting to start a cgroup job by first creating the cgroup:
init:cgroup_ create: 1172: cgmanager_ create_ sync(controller ='freezer' , path='upstart/ cgroup- ted-ted' ) returned -1
This operation failed. Details from the cgmanager server for the cgmanager_ create_ sync() request:
do_create_main: do_create_main:263: controller= 'freezer' , cgroup= 'upstart/ cgroup- ted-ted' , ucred p=(pid=1426, uid=0, gid=0), ucred r=(pid=3786, uid=32011, gid=32011) '/run/cgmanager /fs/freezer' run/cgmanager/ fs/freezer' , mode=2 do_create_ main: pid 3786 (uid 32011 gid 32011) may not create under /run/cgmanager/ fs/freezer
do_create_main: do_create_main:315: r.pid=3786, r.uid=32011, r.gid=32011, dirpath=
may_access: may_access:925: uid=32011, gid=32011, path='/
may_access: may_access:933
may_access: may_access:939
may_access: may_access:951
may_access: may_access:963
may_access: may_access:975
may_access: may_access:980
may_access: may_access:985
may_access: may_access:990
cgmanager: