About this list Date view Thread view Subject view Author view Attachment view

From: Herbert Poetzl (herbert_at_13thfloor.at)
Date: Thu 17 Jun 2004 - 10:29:48 BST


On Wed, Jun 16, 2004 at 11:10:32PM +0000, Liam Helmer wrote:
> I've been playing with the alpha vserver tools, and I'm trying to figure
> out how to expand a vservers capabilities. I hacked the previous version
> to not pass the --secure flag with a certain commandline option, so that
> I could do things like run X-Windows or similar applications. I found a
> reference to OPTION_INSECURE, but even if I change the scripts so
> OPTION_INSECURE is always = 1, it still works securely (reducecap --show
> is unchanged in the vserver)

hmm, well, !--secure is _very_ insecure, maybe it would
be a better approach to add the CAPs one by one, to
find a minimal set of CAPs for your 'special' use ...

anyway, the only thing --secure actually does, is reducing
the full set of capabilities to a considered secure minimum,
so by adding _all_ missing CAPs you should get your
--insecure server ...

> Also, I was wondering if there was any information on how to use the cpu
> limitation features (and other scheduling features), and a list of the
> config file options that are available for the new vserver tools in
> general?

you will require recent 2.6 development kernels to do this

HTH,
Herbert

> Thanks!
> Liam
>
> _______________________________________________
> Vserver mailing list
> Vserver_at_list.linux-vserver.org
> http://list.linux-vserver.org/mailman/listinfo/vserver
_______________________________________________
Vserver mailing list
Vserver_at_list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


About this list Date view Thread view Subject view Author view Attachment view
[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Thu 17 Jun 2004 - 10:30:04 BST by hypermail 2.1.3