It looks like the attributes that do not require CAP_LINUX_IMMUTABLE (i.e.
anything except IMMUTABLE_[FILE|LINK]FL and APPEND_FL) can by modified by
root from within a vserver:

]# vserver grisha enter
ipv4root is now 192.168.1.33
New security context is 10033
[EMAIL PROTECTED]:grisha /]lsattr /bin/ls
----i------t- /bin/ls
[EMAIL PROTECTED]:grisha /]chattr +d /bin/ls
[EMAIL PROTECTED]:grisha /]lsattr /bin/ls
----i-d----t- /bin/ls

I'm not sure this is workng "as expected". It seems that an immutable file
should be immutable including attribute changes. This doesn't seem like a
VServer, but rather a general Linux problem, but I wonder if the VServer
patches should insist that immutability includes flag changing.

Grisha
_______________________________________________
Vserver mailing list
[EMAIL PROTECTED]
http://list.linux-vserver.org/mailman/listinfo/vserver

Reply via email to