Re: [vserver] fake capabilities ?

From: Herbert Poetzl <herbert_at_13thfloor.at>
Date: Fri 08 Feb 2008 - 01:32:52 GMT
Message-ID: <20080208013252.GB3231@MAIL.13thfloor.at>

On Tue, Feb 05, 2008 at 12:59:00PM +0100, jean-marc pouchoulon wrote:
> hello all ,
> I've got a vserver with Ntop in it. Ntop needs to start CAP_NET_RAW
> capabilitie.

> Is there is a way to present to Ntop a fake CAP_NET_RAW capabilitie ?
> ( I use netflow with Ntop and I don't have to sniff the network )

capability masking was added in vs2.1.x and it
got included in vs2.2.x pretty early

so, you are already using this feature, but
it seems not to help you

> I read something in list about fake capabilities and bind.
> is it implemented yet?

yep, that's exactly the feature I'm talking
about, and it makes bind work even though the
capabilities are not available inside a secure
guest

> I'm on a recent vserver version:

HTC,
Herbert

> Linux-VServer Test [V0.17] Copyright (C) 2003-2006 H.Poetzl
> chcontext is working.
> chbind is working.
> Linux 2.6.22.16-vs2.2.0.6 #
>
> ....
>
> thanks in advance
>
> jean-marc
Received on Fri Feb 8 01:33:10 2008

[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Fri 08 Feb 2008 - 01:33:15 GMT by hypermail 2.1.8