Hi there,
on Tuesday, October 30, 2007 at 2:50:08 PM there was posted:
echo "CAP_NET_RAW" > /etc/vservers/${YOUR_GUEST}/bcapabilities
That does it, true - but it also opens the RAW access to the
net-interface which makes it able to "listen" to the net traffic of
_all_ guests from within that one - and that is a serious security
hole.
-- regards 'n greez, Guenther Fuchs (aka "muh" and "powerfox")Received on Tue Oct 30 17:51:28 2007