cgroup: don't CLONE_NEWCGROUP on clone

These flags are restored differently, so let's not make extra namespaces
where we don't need them.
Signed-off-by: Tycho Andersen <tycho.andersen@canonical.com>
Signed-off-by: Pavel Emelyanov <xemul@virtuozzo.com>

criu/cr-restore.c

@@ -1209,7 +1209,7 @@ static inline int fork_with_pid(struct pstree_item *item)
 	 * Here is an idea -- unhare net namespace in callee instead.
 	 */
 	ret = clone(restore_task_with_children, ca.stack_ptr,
-		    (ca.clone_flags & ~CLONE_NEWNET) | SIGCHLD, &ca);
+		    (ca.clone_flags & (~CLONE_NEWNET | ~CLONE_NEWCGROUP)) | SIGCHLD, &ca);
 
 	if (ret < 0) {
 		pr_perror("Can't fork for %d", pid);