sysfs: fix permissions on cgroup mounts