On Thu, Nov 23, 2006 at 05:25:12PM +0100, Wolfgang Hennerbichler wrote:
> On 21.11.2006, at 03:38, Herbert Poetzl wrote:
>
> >>One more question...
> >>Do I have to do something in order to enable 'masking' for bind9?
> >>
> >>Bind9 works without problems, but after some time it freezes
> >>completely, whis is not very nice...
> >
> >nope, freezing is not nice, could you try to attach
> >'strace -fF -p <bindpid>' once that happens, and look
> >what bind9 is doing on your guest?
>
> Sorry, switched back to my stable vserver kernel for now and can't
> try anymore.
> I'd just like to know if I need any special capability or flag for
> bind to work with the latest dev-version.
nope, is supposed to work out of the box ...
> I do have CAP_NET_RAW in bcapabilities, and nproc in flags.
nproc has been obsoleted for 3 years now, and doesn't do
anything on 2.6 kernels, CAP_NET_RAW is not required for
proper operation (instead it opens a security leak by allowing
the guest to sniff and spoof traffic)
best,
Herbert
> thx
> wogri
>
> --
> www.vix.at // www.aco.net // www.sth.ac.at
> wh@univie.ac.at // WH844-RIPE
> Vienna University Computer Center
> Tel: +43 1 4277-14031 // Fax: -9140
>
>
> _______________________________________________
> Vserver mailing list
> Vserver@list.linux-vserver.org
> http://list.linux-vserver.org/mailman/listinfo/vserver
_______________________________________________
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver
Received on Thu Nov 23 18:39:21 2006