Re: [vserver] [Grsec] audit denies pivot_root ?

From: Romain Riviere <romain.riviere_at_gmail.com>
Date: Sun 21 Nov 2010 - 16:53:20 GMT
Message-Id: <4C105754-E5BF-44A7-BCDB-D67C05505350@gmail.com>

Hello,

Le 19 nov. 2010 à 17:22, Romain Riviere a écrit :

> Hello,
>
> Le 19 nov. 2010 à 16:54, Rik Bobbaers a écrit :
>
>>> The problem is that "vserver <name> start" fails with "vcontext:
>>
>> check this one...:
>>
>>> pivot_root(): Invalid argument"<snip>
>> kernel.grsecurity.chroot_deny_pivot = 1
>>
>> looks quite obvious... :)
>
> It's not: the exact same behaviour is displayed when chroot_deny_pivot is set to 0.

Harry, just to confirm one thing, as I have been playing a lot with grsec flags. The following setup *ALWAYS* causes the pivot_root error:
kernel.grsecurity.audit_mount=1
kernel.grsecurity.audit_chdir=0
kernel.grsecurity.chroot_deny_pivot=0

Cheers,
Romain
Received on Sun Nov 21 16:54:17 2010

[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Sun 21 Nov 2010 - 16:54:18 GMT by hypermail 2.1.8