From: Herbert Poetzl (herbert_at_13thfloor.at)
Date: Wed 26 Nov 2003 - 15:23:45 GMT
On Wed, Nov 26, 2003 at 10:05:26AM -0500, Jacques Gelinas wrote:
> On Sat, 22 Nov 2003 20:36:01 -0500, Herbert Poetzl wrote
> >
> > Hi Jack!
> >
> > I get this on Linux version 2.4.22-vs1.1.5
> > with vserver-0.27
> >
> > # chcontext --secure --ctx 100 grep -i cap /proc/self/status
> > New security context is 100
> > CapInh: 0000000000000000
> > CapPrm: 00000000fffffeff
> > CapEff: 00000000fffffeff
> > CapBset: 00000000fffffeff
> >
> > (which basically means, all except CAP_SETPCAP)
>
> Ok, got it. I was passing 0 instead of -2 when lowering the capability ceiling.
we should talk about moving the capset and the
vserver flags into a separate interface, we have done
some work on that last week, I'll draft a proposal in
the next few days ...
> 0.28 will be released today.
thanks,
Herbert
>
> ---------------------------------------------------------
> Jacques Gelinas <jack_at_solucorp.qc.ca>
> vserver: run general purpose virtual servers on one box, full speed!
> http://www.solucorp.qc.ca/miscprj/s_context.hc
> _______________________________________________
> Vserver mailing list
> Vserver_at_list.linux-vserver.org
> http://list.linux-vserver.org/mailman/listinfo/vserver
_______________________________________________
Vserver mailing list
Vserver_at_list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver