[Vserver] re: Alert! --secure broken in 0.27 + vs1.1.5:
 vserver development mailing list 
[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
About this list Date view Thread view Subject view Author view Attachment view

From: Jacques Gelinas (jack_at_solucorp.qc.ca)
Date: Wed 26 Nov 2003 - 15:05:26 GMT

On Sat, 22 Nov 2003 20:36:01 -0500, Herbert Poetzl wrote
>
> Hi Jack!
>
> I get this on Linux version 2.4.22-vs1.1.5
> with vserver-0.27
>
> # chcontext --secure --ctx 100 grep -i cap /proc/self/status
> New security context is 100
> CapInh: 0000000000000000
> CapPrm: 00000000fffffeff
> CapEff: 00000000fffffeff
> CapBset: 00000000fffffeff
>
> (which basically means, all except CAP_SETPCAP)

Ok, got it. I was passing 0 instead of -2 when lowering the capability ceiling.

0.28 will be released today.

---------------------------------------------------------
Jacques Gelinas <jack_at_solucorp.qc.ca>
vserver: run general purpose virtual servers on one box, full speed!
http://www.solucorp.qc.ca/miscprj/s_context.hc
_______________________________________________
Vserver mailing list
Vserver_at_list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver

About this list Date view Thread view Subject view Author view Attachment view
[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Wed 26 Nov 2003 - 15:14:58 GMT by hypermail 2.1.3