Re: [Vserver] Syslog and vserver

2004-12-28 Thread Herbert Poetzl
On Tue, Dec 28, 2004 at 07:19:50PM +0100, Oliver Welter wrote: > Hi Folks, > > question on syslog > > What is the best way to use syslog inside the vServers - is it possible > to have one Logfile on the main maschine that collects all information ? yes, definitely > Whats the best way to

Re: [Vserver] packaging review for new Debian packages

2004-12-28 Thread Herbert Poetzl
On Tue, Dec 28, 2004 at 08:08:34PM +0100, Hans Ulrich Niedermann wrote: > Herbert Poetzl <[EMAIL PROTECTED]> writes: > > > On Tue, Dec 28, 2004 at 11:23:03AM +0100, Hans Ulrich Niedermann wrote: > > [ Vserver guest systems are different from normal systems, and thus > require special handling s

Re: [Vserver] Sys V IPC tracking

2004-12-28 Thread Herbert Poetzl
On Tue, Dec 28, 2004 at 04:28:44PM -0500, Gregory (Grisha) Trubetskoy wrote: > > On Tue, 28 Dec 2004, Herbert Poetzl wrote: > > >On Mon, Dec 27, 2004 at 02:45:12PM -0500, Gregory (Grisha) Trubetskoy > >wrote: > >> > >> > >>Hi all, Merry XMas - > >> > >>Is there a simpler way to track IPC resourc

Re: [Vserver] Sys V IPC tracking

2004-12-28 Thread Gregory (Grisha) Trubetskoy
On Tue, 28 Dec 2004, Herbert Poetzl wrote: On Mon, Dec 27, 2004 at 02:45:12PM -0500, Gregory (Grisha) Trubetskoy wrote: Hi all, Merry XMas - Is there a simpler way to track IPC resources short of entering every context and running ipcs? It seems that context 1 can only see its own semaphores/locks

Re: [Vserver] Syslog and vserver

2004-12-28 Thread Liam Helmer
I think that an attacker is going to know it's a vserver anyways if they're looking. So, I have all the vservers logs being pulled by a central logging daemon, which logs it all to mysql. It's more convenient and useful, IMHO. I think that having too many separate logging daemons logging to differe

Re: [Vserver] packaging review for new Debian packages

2004-12-28 Thread Hans Ulrich Niedermann
Herbert Poetzl <[EMAIL PROTECTED]> writes: > On Tue, Dec 28, 2004 at 11:23:03AM +0100, Hans Ulrich Niedermann wrote: [ Vserver guest systems are different from normal systems, and thus require special handling services for klogd and hardware access. Herbert Poetzl says "just disable the servi

Re: [Vserver] Syslog and vserver

2004-12-28 Thread Adrian Reyer
On Tue, Dec 28, 2004 at 07:19:50PM +0100, Oliver Welter wrote: > What is the best way to use syslog inside the vServers - is it possible > to have one Logfile on the main maschine that collects all information ? > Whats the best way to do so ? Sharing a syslock socket ? Creating a > syslog insta

Re: [Vserver] Syslog and vserver

2004-12-28 Thread Jon Bendtsen
Den 28. dec 2004, kl. 19:19, skrev Oliver Welter: Hi Folks, question on syslog What is the best way to use syslog inside the vServers - is it possible to have one Logfile on the main maschine that collects all information ? Whats the best way to do so ? Sharing a syslock socket ? Creating a

[Vserver] Syslog and vserver

2004-12-28 Thread Oliver Welter
Hi Folks, question on syslog What is the best way to use syslog inside the vServers - is it possible to have one Logfile on the main maschine that collects all information ? Whats the best way to do so ? Sharing a syslock socket ? Creating a syslog instance fpr each vServer and using network

Re: [Vserver] Vserver configuration for IPv4 and IPv6

2004-12-28 Thread Herbert Poetzl
On Tue, Dec 28, 2004 at 12:43:45PM +0100, Hans Ulrich Niedermann wrote: > Hi, > > this is an excerpt from util-vserver-0.30.196/doc/cfg.txt: > > /etc/vservers > |-- > `-- interfaces > |-- [dev] > |-- [prefix] > |-- [mask] > |-- [bcast] > `-- * >

Re: [Vserver] Sys V IPC tracking

2004-12-28 Thread Herbert Poetzl
On Mon, Dec 27, 2004 at 02:45:12PM -0500, Gregory (Grisha) Trubetskoy wrote: > > > Hi all, Merry XMas - > > Is there a simpler way to track IPC resources short of entering every > context and running ipcs? It seems that context 1 can only see its own > semaphores/locks/etc, wouldn't it make mo

Re: [Vserver] packaging review for new Debian packages

2004-12-28 Thread Herbert Poetzl
On Tue, Dec 28, 2004 at 11:23:03AM +0100, Hans Ulrich Niedermann wrote: > Herbert Poetzl <[EMAIL PROTECTED]> writes: > > > On Mon, Dec 27, 2004 at 09:05:21PM -0500, Stephen Frost wrote: > >> * Herbert Poetzl ([EMAIL PROTECTED]) wrote: > >> > On Mon, Dec 27, 2004 at 08:48:43PM -0500, Stephen Frost

Re: [Vserver] packaging review for new Debian packages

2004-12-28 Thread Herbert Poetzl
On Tue, Dec 28, 2004 at 05:23:18PM +0100, Enrico Scholz wrote: > [EMAIL PROTECTED] (Stephen Frost) writes: > > >> [... absolute paths vs. resolution with $PATH ...] > >> using execvp(3) would mean: > >> * trusting in $PATH that it contains the wanted path (this has to deal > >> with packaging p

Re: [Vserver] packaging review for new Debian packages

2004-12-28 Thread Enrico Scholz
[EMAIL PROTECTED] (Stephen Frost) writes: >> [... absolute paths vs. resolution with $PATH ...] >> using execvp(3) would mean: >> * trusting in $PATH that it contains the wanted path (this has to deal >> with packaging philosophies also which expect all 3rd party apps >> under /opt/) --> /etc

Re: [Vserver] packaging review for new Debian packages

2004-12-28 Thread Stephen Frost
* Hans Ulrich Niedermann ([EMAIL PROTECTED]) wrote: > And you can even do that disabling cleanly and automatically if you > install your guest systems with a virtual klogd instead of the > standard one which contains nothing but > > Provides: linux-kernel-log-daemon > Conflicts: li

Re: [Vserver] packaging review for new Debian packages

2004-12-28 Thread Stephen Frost
* Herbert Poetzl ([EMAIL PROTECTED]) wrote: > On Mon, Dec 27, 2004 at 09:05:21PM -0500, Stephen Frost wrote: > > Again, a Debian util-vserver package couldn't do that due to sane policy > > issues. It'd be nice if we didn't have to worry about it because the > > kernel/vserver patch took care of i

Re: [Vserver] packaging review for new Debian packages

2004-12-28 Thread Stephen Frost
* Enrico Scholz ([EMAIL PROTECTED]) wrote: > [EMAIL PROTECTED] (Stephen Frost) writes: > > So, it's used by scripts *and* is compiled into programs? > > Yes; e.g. I believed you, I just find it kind of ugly. :) > > I'm thinking it might go in /usr/share/util-vserver then, since it's > > not syst

Re: [Vserver] packaging review for new Debian packages

2004-12-28 Thread Bodo Eggert
On Mon, 27 Dec 2004, Stephen Frost wrote: > * Enrico Scholz ([EMAIL PROTECTED]) wrote: > > * execve(2) is more efficiently than execvp(3) > > Is there something in here that actually would notice from such a > change? Seriously, is there *really* some benefit here for an end user > or is this ju

[Vserver] Vserver configuration for IPv4 and IPv6

2004-12-28 Thread Hans Ulrich Niedermann
Hi, this is an excerpt from util-vserver-0.30.196/doc/cfg.txt: /etc/vservers |-- `-- interfaces |-- [dev] |-- [prefix] |-- [mask] |-- [bcast] `-- * |-- ip |-- [dev] |-- [prefix] |-- [mask] |--

Re: [Vserver] packaging review for new Debian packages

2004-12-28 Thread Hans Ulrich Niedermann
Herbert Poetzl <[EMAIL PROTECTED]> writes: > On Mon, Dec 27, 2004 at 09:05:21PM -0500, Stephen Frost wrote: >> * Herbert Poetzl ([EMAIL PROTECTED]) wrote: >> > On Mon, Dec 27, 2004 at 08:48:43PM -0500, Stephen Frost wrote: >> > > syslogd and klogd are seperate packages already, the problem is tha