Hello,
Le 19 nov. 2010 à 17:22, Romain Riviere a écrit :
> Hello,
>
> Le 19 nov. 2010 à 16:54, Rik Bobbaers a écrit :
>
>>> The problem is that "vserver <name> start" fails with "vcontext:
>>
>> check this one...:
>>
>>> pivot_root(): Invalid argument"<snip>
>> kernel.grsecurity.chroot_deny_pivot = 1
>>
>> looks quite obvious... :)
>
> It's not: the exact same behaviour is displayed when chroot_deny_pivot is set to 0.
Harry, just to confirm one thing, as I have been playing a lot with grsec flags. The following setup *ALWAYS* causes the pivot_root error:
kernel.grsecurity.audit_mount=1
kernel.grsecurity.audit_chdir=0
kernel.grsecurity.chroot_deny_pivot=0
Cheers,
Romain
Received on Sun Nov 21 16:54:17 2010