2006/4/24, Herbert Poetzl <herbert@13thfloor.at>:
> networking in Linux-VServer happens on the host to
> provide highest possible performance, which atm
> means that the iptable entries have to be set on
> the host too, this might change in the future, but
> usually it doesn't pose any problem ...
I've read something about virtual network devices and the ngnet project.
Is it the futur changed you are talking about ?
Do you have any other solution for virtual hosting services to provide
guests
firewall management ?
>
> typically you have about 8 devices in your guest,
> which are created with the 'build' methods, and you
> really don't want more than those inside a guest for
> security reasons, so there is really no point in
> using devfs or udev ...
I understand the security recommandations to limit devices
inside a guest and agree with them.
I was asking because when entering a guest I get the following error message
mesg: /dev/pts/1: Operation not permitted
Any clue ?
thanks for your help
Jon
_______________________________________________
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver
Received on Tue Apr 25 17:04:28 2006