Permission denied su / runuser

LXD
1

Hello, I just noticed in a few of my centos 7 containers I’m running into the following trying to su - ${user} inside the container. Hosts that su/runuser inside the containers work on are Centos 7.8. 7.9 for the ones that don’t give permission denied. Containers are all centos 7.9. I’m not seeing any difference in the host or container config.

Anyone else run into this?

su: pam_limits(su-l:session): Could not set limit for PRIO_PROCESS: Permission denied

There error is coming from here https://github.com/linux-pam/linux-pam/blob/master/modules/pam_limits/pam_limits.c#L1067

status = setpriority(PRIO_PROCESS, 0, pl->priority);
    if (status != 0) {
        pam_syslog(pamh, LOG_ERR, "Could not set limit for PRIO_PROCESS: %m");
        retval = LIMIT_ERR;
    }

Oddly within the same container renice works fine. So I wonder what pam_limits is trying to set this priority to?

if (setpriority(which, who, prio) < 0) {
		warn(_("failed to set priority for %d (%s)"), who, idtype[which]);
		return 1;
	}

Thanks,
-Matt