Ensure cgroup dirs are cleaned up properly

Signed-off-by: Ed King <eking@pivotal.io>

libcontainer/cgroups/fs/apply_raw.go

@@ -142,18 +142,19 @@ func (m *Manager) Apply(pid int) (err error) {
 			}
 			return err
 		}
+		m.Paths[sys.Name()] = p
 
 		if err := sys.Apply(d); err != nil {
 			if os.IsPermission(err) && m.Cgroups.Path == "" {
 				// If we didn't set a cgroup path, then let's defer the error here
 				// until we know whether we have set limits or not.
 				// If we hadn't set limits, then it's ok that we couldn't join this cgroup, because
 				// it will have the same limits as its parent.
+				delete(m.Paths, sys.Name())
 				continue
 			}
 			return err
 		}
-		m.Paths[sys.Name()] = p
 
 	}
 	return nil