On Wed, 10 Mar 2010 23:49:20 +0000
Ed W <lists@wildgooses.com> wrote:
> On 09/03/2010 16:05, Corey Wright wrote:
> >
> >> i'm not running with the grsec patch, but i believe the attached
> >> script/wrapper deals with your /proc problem (if i remember correctly).
> >>
> >
>
> This appears to be spot on - many thanks
>
> The trick appears to be the:
>
> $__SBINDIR/setattr --watch /proc/vmstat
>
> I don't seem to have any man pages for setattr (which could be my duff
> installation...) - where might I find out more about how this incantation
> is doing it's thing please?
http://wiki.linux-vserver.org/Secure_ProcFS_Entries
http://wiki.linux-vserver.org/Filesystem_attributes
http://svn.linux-vserver.org/projects/util-vserver/browser/trunk/src/setattr.c
$ /usr/sbin/setattr --help
Usage: /usr/sbin/setattr [-Rx] [--[~](iunlink|admin|watch|hide|barrier|
iunlink-but-not-immutable|immutable|write)]* [--] <file>+
Options:
-R ... recurse through directories
-x ... do not cross filesystems
Please report bugs to vserver@list.linux-vserver.org
> Thanks again
no prob.
> Ed W
corey
-- undefined@pobox.comReceived on Thu Mar 11 04:04:40 2010