[Vserver] CAP_SYS_ADMIN, how unsecure it is within vserver

2005-05-28 Thread gary ng
Hi, I am testing out vserver(1.2.10 on 2.4, not ready for 2.6 yet because of stability issue unrelated to vserver) and I am wondering what is the impact of giving CAP_SYS_ADMIN to it. Without it, I cannot mount within vserver but I see mount as a legitimate use like mounting CIFS/NFS or FUSE

Re: [Vserver] Start-Up Scipts

2005-05-28 Thread Björn Steinbrink
On 2005.05.27 18:15:34 +0200, Oliver Welter wrote: Hi List, I have a little problem with vserver Start-up scriots... I am running Gentoo Host/Guest with 2.6.9 kernel and vserver-tools 0.30.196 1) I have a vServer called wwwmain - I added a script wwwmain.sh in /etc/vservers/ but it seems

Re: [Vserver] Confused by routing

2005-05-28 Thread Herbert Poetzl
On Fri, May 27, 2005 at 02:26:58PM +0200, Gilles wrote: Hi Herbert, Thanks a lot for this complete example. I'll muse on it (may take some time!). Two small questions, to be sure: 1. Everything is setup on the Host(s), nothing on the guest (i.e. in the pre-start.d et al.

Re: [Vserver] CAP_SYS_ADMIN, how unsecure it is within vserver

2005-05-28 Thread Bodo Eggert
On Sat, 28 May 2005, gary ng wrote: I am testing out vserver(1.2.10 on 2.4, not ready for 2.6 yet because of stability issue unrelated to vserver) and I am wondering what is the impact of giving CAP_SYS_ADMIN to it. Without it, I cannot mount within vserver but I see mount as a legitimate

Re: [Vserver] CAP_SYS_ADMIN, how unsecure it is within vserver

2005-05-28 Thread gary ng
Thanks. The reason I said it is legitimate use is that I saw people offer vserver based VDS solutions. After a closer examine, I think vserver is more suitable for host service only jail rather than a full featured VDS(I had one before which use uml), so mainly for internal server