About this list Date view Thread view Subject view Author view Attachment view

From: Ola Lundqvist (opal_at_debian.org)
Date: Wed 26 Nov 2003 - 06:31:31 GMT


Hi

I heard from a friend on IRC:

14:50 < stone> util-vserver are currently the 'vserver' tools,
14:50 < stone> vserver-0.27 has some security issues and
14:50 < stone> vserver-0.26 doesn't work with vs1.1.x
14:50 < stone> I tried to get contact to the debian package
14:50 < stone> maintainers (not too hard ;) but got no response
14:50 < stone> maybe they will update/re-package util-vserver
14:50 < stone> for debian on user request ...

The reason why you could not contact me is that the Debian email
system has been shut down. The reason for that was that some debian
machines has been compromized.

What is this?

Regards,

// Ola

On Sat, Nov 22, 2003 at 08:36:15PM +0100, Herbert Poetzl wrote:
>
> Hi Jack!
>
> I get this on Linux version 2.4.22-vs1.1.5
> with vserver-0.27
>
> # chcontext --secure --ctx 100 grep -i cap /proc/self/status
> New security context is 100
> CapInh: 0000000000000000
> CapPrm: 00000000fffffeff
> CapEff: 00000000fffffeff
> CapBset: 00000000fffffeff
>
> (which basically means, all except CAP_SETPCAP)
>
> where on Linux version 2.4.22-vs1.00 it gives
>
> # chcontext --secure --ctx 100 grep -i cap /proc/self/status
> New security context is 100
> CapInh: 0000000000000000
> CapPrm: 00000000f40c04ff
> CapEff: 00000000f40c04ff
> CapBset: 00000000f40c04ff
>
> util-vserver 0.26 gave me on both vs1.00 and vs1.1.5
>
> # chcontext --secure --ctx 100 grep -i cap /proc/self/status
> New security context is 100
> CapInh: 0000000000000000
> CapPrm: 00000000d40c04ff
> CapEff: 00000000d40c04ff
> CapBset: 00000000d40c04ff
>
> which I consider correct, as CAP_QUOTACTL should be
> optional ...
>
> please explain/fix
>
> TIA,
> Herbert
>
> _______________________________________________
> Vserver mailing list
> Vserver_at_list.linux-vserver.org
> http://list.linux-vserver.org/mailman/listinfo/vserver

-- 
 --------------------- Ola Lundqvist ---------------------------
/  opal_at_debian.org                     Annebergsslingan 37      \
|  opal_at_lysator.liu.se                 654 65 KARLSTAD          |
|  +46 (0)54-10 14 30                  +46 (0)70-332 1551       |
|  http://www.opal.dhs.org             UIN/icq: 4912500         |
\  gpg/f.p.: 7090 A92B 18FE 7994 0C36  4FE4 18A1 B1CF 0FE5 3DD9 /
 ---------------------------------------------------------------
_______________________________________________
Vserver mailing list
Vserver_at_list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


About this list Date view Thread view Subject view Author view Attachment view
[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Wed 26 Nov 2003 - 06:32:59 GMT by hypermail 2.1.3