On 2006.06.25 10:33:31 +0200, Martin Grunert wrote:
> Hi!
>
> I want to use dazuko on my vserver host, to be able to scan efficient my
> files for viruses.
>
> Therefore the capabilities have to be compiled as module.
>
> Is this possible with the vserver kernel?
Should make no difference if you make sure to load the module early
enough (you probably know when that is better than me). The whole
security concept of Linux-VServer relies on POSIX capability support and
lots of folks had insecure setups, because the debian kernel config
builds that thing as a module and when people based their config on that
one, they didn't know that debian kernels have that module auto-loaded
via some /lib/modules/`uname -r`/ file rather than /etc/modules. So they
actually never had that module loaded. For that reason we decided to
make it mandatory to have capabilties built-in, but there's is no
technical reason for this AFAIK, changing the config manually or patching
the Kconfig file to allow modular builds should be fine, of course only
if you load it ;)
HTH
Björn
_______________________________________________
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver
Received on Sun Jun 25 10:00:19 2006