Re: [vserver] Using nmap

From: Nikolay Kichukov <hijacker_at_oldum.net>
Date: Mon 22 Jun 2009 - 08:30:23 BST
Message-ID: <4A3F330F.2060703@oldum.net>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi John,
You can take advantage of the vattribute command, so that you
enable/disable capabilities on the fly.

Cheers,
- -Nik

John Alberts wrote:
> On Fri, Jun 19, 2009 at 9:38 AM, John Alberts<john.m.alberts@gmail.com> wrote:
>
>> I've never used any of the capability flags. Is there any way I can
>> allow this by adding a capability for this guest. I realize allowing
>> raw net access is not a good idea, but I would just like to enable it
>> temporarily so I can run a utility in the guest one time that requires
>> nmap. Then I'll just remove the capability.
>
> Sorry. Please ignore my rambling. I saw the documentation on the
> wiki, but I was a little weary of trying it on my production server.
> I added NET_ADMIN, NET_RAW, NET_BROADCAST and NET_BIND_SERVICE to
> /etc/vservers/guestname/bcapabilities and restarted the guest. Nmap
> works great now and I just removed the bacpabilities and restarted the
> server again, since I don't need nmap again.
> I know I probably added more capabilities than I needed, but it was
> only temporary.
>
> Regards,
> John
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iQEcBAEBAgAGBQJKPzMOAAoJEDFLYVOGGjgXOHsIALloF/ZieGwQJDoJFeFYt1Un
s7qPSkMkaF6mwzs6QHra2DoYRln51vBRaMCejoCp/6fWm97FVGLBDrQWoVDifZiR
uR+WpogngHJgLjBlR2F9h50ATjeQLiQgH8hoNQAR0SKtK8/d8QP8wvplNJ2vSrfm
efxqnDOLpPswJxIDZlD8FDPeI35bYy/m4y9NtNkXomoe17MDHc6sYNn7G+5pmCyv
hHMQcO6m/SCQF/2nTueKRM5woXQmfQJV89xUdgcpQNzIcee+lP8crbtsxfTcxeP5
cir8fXlp0I88JFyNuIZUb2MGwmFylxbiIZ0TAL5AG8nREL08cTXpKl110Dh1C/Y=
=S3Yu
-----END PGP SIGNATURE-----
Received on Mon Jun 22 08:30:54 2009

[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Mon 22 Jun 2009 - 08:30:56 BST by hypermail 2.1.8