[vserver] tcpdump inside vsever, recommendation

From: Steve Kieu <msh.computing_at_gmail.com>
Date: Sun 15 Jan 2012 - 23:06:19 GMT
Message-ID: <CAAQ-o+_EnVRwN-KdPbNkBL4J7NCh6M9nEX+PK0kW1No7x_--qw@mail.gmail.com>

Hello everyone,

I know I can ssh in the host and run tcpdump but I do not want to. So I
need it from the vserver instance.

From

http://linux-vserver.org/Capabilities_and_Flags

I think I can do

echo "NET_RAW" >> /etc/vservers/myserver/bcapabilities

I could not see anything more serious security problems when adding this
(not like NET_ADMIN) but I am not expert at all. Any comment, suggestions,
idea please?

kind regards,

-- 
Steve Kieu
Received on Sun Jan 15 23:06:31 2012
[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Sun 15 Jan 2012 - 23:06:31 GMT by hypermail 2.1.8