In deed it turns out that there is 'bad' things if turn selinux on together
with vserver. Even the box itself selinux is set to permissive. Or somethng
not good in relation to vservers in the security kernel config.
I have rebuild the kernel and not selecting selinux and with .8 vserver
patch and tested, things are fine.
For reference I will attach two kernel config file with .8 patch to see if
any relations to vservers these security settings. For now, I just compile
the kernel without it then. Hope that it may give more information about
why it fail or useful for you.
On Tue, Nov 1, 2011 at 1:30 PM, Herbert Poetzl <firstname.lastname@example.org> wrote:
> On Tue, Nov 01, 2011 at 11:40:00AM +1100, Steve Kieu wrote:
> > Hello ,
> > I have just discovered a strange problem with patch
> > vs126.96.36.199.29.8 for 188.8.131.52. I can not inside the vserver
> > guest from root to su to anybody, it prompts me password !
> > If the user does nto have password set then it is OK
> > However if as root I run
> > passwd oter_username then I got error:
> > [root@cacti ~]# passwd stevek
> > passwd: unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 is not
> > authorized to change the password of stevek
> > It happened with all guests, and it does not happen with
> > vs184.108.40.206.29.7
> well, the changes between vs220.127.116.11.29.7 and vs18.104.22.168.29.8
> are solely NFS related (see
> so I presume your guests are on NFS?
> > Please investigate if it is a bug somewhere?
> will do, please try to revert the delta linked above from
> the kernel which causes this misbehaviour and let us know
> if that fixes the issue for you ...
> thanks in advance,
> > or advise me that I did somethign wrong, :-)
> > I have to revert back to .7 for now
> > Thanks,
> > --
> > Steve Kieu
-- Steve Kieu