About this list Date view Thread view Subject view Author view Attachment view

From: Herbert Poetzl (herbert_at_13thfloor.at)
Date: Wed 03 Sep 2003 - 18:49:37 BST


On Wed, Sep 03, 2003 at 10:22:50AM -0700, JVDS.com Support wrote:
> Hi,
> I'm trying to stop one vserver being able to tcpdump and see another
> vservers traffic however whilst keeping CAP_NET_RAW so they can ping. Any
> ideas? Is there a CAP I can set?

guess not, because the usual ping means full access to
the network stack, and because it's not really virtual
you'll end up with a lot of optortunities ...

why do you need/want the ping from inside a vserver anyway?

best,
Herbert

> Rgds
>
> Rus


About this list Date view Thread view Subject view Author view Attachment view
[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Wed 03 Sep 2003 - 19:05:13 BST by hypermail 2.1.3