Re: [vserver] mknod inside vserver (bind error)

ADNET Ghislain wrote:
>
>> another approach is to setup device mapping
>> properly to allow certain 'considered secure'
>> devices to be created inside a guest
>>
>> yet another (but insecure) approach is to give
>> the bcapability to create arbitrary device nodes
>> to the guest
>>
>> HTH,
>> Herbert
>>
> you can give device mapping without the bcapability ? my last try failed
> to work with this setup. Can you give an exemple of how should work the
> device mapping with a simple exemple of

No, if your kernel is configured with device mapping, you need to give the guest CAP_MKNOD
and setup the device mapping tables to allow it to do whatever it is you're looking for.

-- 
Daniel Hokka Zakrisson