Re: [Vserver] vserver features

From: Jonathan Dray <>
Date: Mon 24 Apr 2006 - 17:40:22 BST
Message-ID: <>

2006/4/24, Herbert Poetzl <>:

> networking in Linux-VServer happens on the host to
> provide highest possible performance, which atm
> means that the iptable entries have to be set on
> the host too, this might change in the future, but
> usually it doesn't pose any problem ...

I've read something about virtual network devices and the ngnet project.
Is it the futur changed you are talking about ?
Do you have any other solution for virtual hosting services to provide
firewall management ?

> typically you have about 8 devices in your guest,
> which are created with the 'build' methods, and you
> really don't want more than those inside a guest for
> security reasons, so there is really no point in
> using devfs or udev ...

I understand the security recommandations to limit devices
inside a guest and agree with them.
I was asking because when entering a guest I get the following error message
mesg: /dev/pts/1: Operation not permitted
Any clue ?

thanks for your help

Vserver mailing list
Received on Tue Apr 25 17:04:28 2006

[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Tue 25 Apr 2006 - 17:04:29 BST by hypermail 2.1.8