Re: [Vserver] bind9 in vserver

From: jean-marc pouchoulon <jean-marc.pouchoulon_at_ac-montpellier.fr>
Date: Sun 11 Jun 2006 - 17:42:17 BST
Message-ID: <448C47E9.3050506@ac-montpellier.fr>

>> Or you have to compile bind with --disable-linux-caps
>>
>
> --> MUCH better ! (security wise)
>
>
>
I'd like to know what is the security problem with CAP_SYS_RESSOURCE ?
Herbert said
"Currently the following Linux Capabilities are considered secure, if
you add others to them, you will probably open some security hole."

but what is the problem with override resource limits, quota, reserved
space on fs, ...? DOS on another vserver using the whole ressources ?

what else ?
thanks

_______________________________________________
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver
Received on Sun Jun 11 17:44:21 2006

[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Sun 11 Jun 2006 - 17:44:26 BST by hypermail 2.1.8