From: Sam Vilain (sam_at_vilain.net)
Date: Tue 19 Oct 2004 - 05:21:52 BST
Björn Steinbrink wrote:
> Did you build your kernel with CONFIG_SECURITY enabled? If so, make sure
> that you also enabled CONFIG_SECURITY_CAPABILITIES and that the module
> is loaded if it was built as a module. Otherwise the default capability
> handling is disabled and your vserver is therefore allowed to
> remove the interfaces.
Could you please make `chcontext --secure' confirm that the capabilities
mask was changed, or that the `capability' module is loaded - this is
extremely nasty behaviour that we should work around at all costs!
-- Sam Vilain, sam /\T vilain |><>T net, PGP key ID: 0x05B52F13 (include my PGP key ID in personal replies to avoid spam filtering) _______________________________________________ Vserver mailing list Vserver_at_list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver