From: Herbert Poetzl (herbert_at_13thfloor.at)
Date: Thu 06 Nov 2003 - 03:28:55 GMT
On Wed, Nov 05, 2003 at 01:15:28PM -0600, Linas Vepstas wrote:
> On Thu, Oct 30, 2003 at 08:57:01PM +0100, vserver-request_at_list.linux-vserver.org was heard to remark:
> > hmm, after --cap '!CAP_SYS_CHROOT', you should not be able
> > to perform chroot() at all ... and I don't see any reason
> > why the chroot() in you example should have worked ...
> Hmm. What was I thinking? Clearly, I should stop testing late at night...
> Thanks for the help, though ...
> I was exploring using some of the vserver features without going "all the way"
> and using vservers. To do this, it's become clear to me that a set of tools
> that are easier to use/better than setpcap/getpcap are needed. Is there
> anyone working on such a thing?
hmm, what do you have in mind?
> p.s. I have ppc64 patches; they are essentially identical to the other
> arch patches. Should I send them to you directly?
vserver ppc64 patches? right this way ;)
are you able/willing to test on that platform?
> pub 1024D/01045933 2001-02-01 Linas Vepstas (Labas!) <linas_at_linas.org>
> PGP Key fingerprint = 8305 2521 6000 0B5E 8984 3F54 64A9 9A82 0104 5933
> Vserver mailing list
Vserver mailing list