Re: [vserver] Operation not permitted

From: Herbert Poetzl <herbert_at_13thfloor.at>
Date: Tue 30 Oct 2007 - 15:05:07 GMT
Message-ID: <20071030150507.GA23390@MAIL.13thfloor.at>

On Tue, Oct 30, 2007 at 02:20:13PM +0100, Albert Czarnecki wrote:
> Hi
>
> I trying used tcpdump or traceroute in virtual machine and I have messages
>
> traceroute 102.100.102.48
> traceroute: raw socket: Operation not permitted
> tcpdump -i eth0 -n port 443
> tcpdump: socket: Operation not permitted
>
> What I must changed to have a run traceroute / tcpdump?

you need CAP_NET_RAW, note that giving that capability
is very insecure in such way that the guest can sniff
on all packets and can inject forged packets with that
capability set

replacing traceroute with tracepath and using tcpdump
on the host is usually the better choice ...

HTC,
Herbert

> Albert Cz
Received on Tue Oct 30 15:05:18 2007

[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Tue 30 Oct 2007 - 15:05:23 GMT by hypermail 2.1.8