[Vserver] Fakeinit issues

2005-04-03 Thread Enrico Scholz
Hello,

I discovered some irregularities regarding fakeinit functionality. The
following program gives different output on host and vservers:

| int main(int argc, char *argv[])
| {
|   printf(%i\n, getsid(atoi(argv[1])));
| }

On host:

| # ./a.out 1
| 0

on VServer:

| # chcontext --xid 100 --flag fakeinit ./a.out 1
| 7448


This issue causes unexpected behaviour with SysV's 'killall5' which will
kill the init-process also.


Btw, this test reveals a minor security leak: getsid(2) does not test if
the pid is visible but gives out the correct result:

| # chcontext --xid 100 --flag fakeinit ./a.out $$
| 10461

('$$' expands to the pid of the bash invoking 'chcontext'). Ditto for
getpgid(2).


The used patch was vs1.9.5-rc4 on a 2.6.11.6 kernel.




Enrico
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


Re: [Vserver] Vservers under Debian

2005-04-03 Thread Ola Lundqvist
Hello

On Thu, Mar 31, 2005 at 05:16:28PM +0100, Gaz Wilson wrote:
 
 Does anyone have any experience with the development branch of Vserver
 and Debian?

Yes I'm the maintainer and yesterday util-vserver 0.30.204 finally
found it's way to sarge.

So if would be really nice if you could try this on this version of
util-vserver as well.

If there is any problem, I would like bug reports so it can be fixed.

Happy hacking!

Regards,

// Ola

 I'm having trouble with things not running within the vserver, most notably
 w and ifconfig, although my testing stopped there, there may be many
 more...
 
 I have a totally clean build of Debian (Sarge), running kernel 2.6.11 and
 VS 1.9.5 built from source.
 
 I have built util-vserver-0.30.204 from source, with the following
 configure line:
 
 ./configure --with-vrootdir=/local/vservers
 
 Which went well, this was installed.
 
 I have then created a vserver with the following command line:
 
 vserver test01 build -m debootstrap --hostname test01 --netdev eth0
 --interface 172.29.31.242/16 -- -d sarge
 
 Which appeared to go well.  I then started it up:
 
 host01:/# vserver test01 start
 Starting system log daemon: syslogd.
 Starting kernel log daemon: klogd.
 Starting MTA: exim4.
 Starting internet superserver: inetd.
 Starting deferred execution scheduler: atd.
 Starting periodic command scheduler: cron.
 
 All OK so far, but when I enter the server, I get all sorts of oddness...
 
 If I enter the vserver, then execute in this order: ls, mount, df, w,
 ifconfig, ifconfig -a, mount /proc and id - I get:
 
 host01:/# vserver test01 enter
 mesg: /dev/pts/0: Operation not permitted
 test01:/# ls
 bin   dev  homelibmnt  proc  sbin  sys  usr
 boot  etc  initrd  media  opt  root  srv   tmp  var
 test01:/# mount
 /dev/hdv1 on / type ufs (defaults)
 none on /proc type proc (defaults)
 none on /tmp type tmpfs (size=16m,mode=1777)
 none on /dev/pts type devpts (gid=5,mode=620)
 test01:/# df
 Filesystem   1K-blocks  Used Available Use% Mounted on
 /dev/hdv1 63457000176252  60057308   1% /
 none 16384 0 16384   0% /tmp
 test01:/# w
 Error: /proc must be mounted
   To mount /proc at boot you need an /etc/fstab line like:
   /proc   /proc   procdefaults
   In the meantime, mount /proc /proc -t proc
 test01:/# ifconfig
 Segmentation fault
 test01:/# ifconfig -a
 Segmentation fault
 test01:/# mount /proc
 mount: permission denied
 test01:/# id
 uid=0(root) gid=0(root) groups=0(root)
 
 I have read many many pages of documentation from various servers including:
 
 http://lena.franken.de/linux/debian_and_vserver/vserver.html
 http://linux-vserver.org/alpha+util-vserver
 http://www.13thfloor.at/vserver/*
 http://www.solucorp.qc.ca/miscprj/s_context.hc
 etc
 etc
 
 but to no avail.
 
 Has anyone seen this issue before and can they advise me what might be astray?
 I guess there could be something in the kernel that is missing or needed,
 but I couldn't say...
 
 GW
 
 -- 
/   Gary Wilson, aka dragon/dragonlord/dragonv480\
  .'(_.--.  e: [EMAIL PROTECTED] MSN: dragonv480   .--._)`.
_   |  Skype:dragonv480 ICQ:342070475 AIM:dragonv480   |   _   
  `.( `--' w: http://volvo480.northernscum.org.uk   `--' ).'
\w: http://www.northernscum.org.uk   /
 ___
 Vserver mailing list
 Vserver@list.linux-vserver.org
 http://list.linux-vserver.org/mailman/listinfo/vserver
 

-- 
 - Ola Lundqvist ---
/  [EMAIL PROTECTED] Annebergsslingan 37  \
|  [EMAIL PROTECTED] 654 65 KARLSTAD  |
|  +46 (0)54-10 14 30  +46 (0)70-332 1551   |
|  http://www.opal.dhs.org UIN/icq: 4912500 |
\  gpg/f.p.: 7090 A92B 18FE 7994 0C36  4FE4 18A1 B1CF 0FE5 3DD9 /
 ---
___
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver