On Wed, Jun 16, 2004 at 11:10:32PM +0000, Liam Helmer wrote:
> I've been playing with the alpha vserver tools, and I'm trying to figure
> out how to expand a vservers capabilities. I hacked the previous version
> to not pass the --secure flag with a certain commandline option, so that
> I could do things like run X-Windows or similar applications. I found a
> reference to OPTION_INSECURE, but even if I change the scripts so
> OPTION_INSECURE is always = 1, it still works securely (reducecap --show
> is unchanged in the vserver)

hmm, well, !--secure is _very_ insecure, maybe it would
be a better approach to add the CAPs one by one, to
find a minimal set of CAPs for your 'special' use ...

anyway, the only thing --secure actually does, is reducing
the full set of capabilities to a considered secure minimum,
so by adding _all_ missing CAPs you should get your
--insecure server  ...

> Also, I was wondering if there was any information on how to use the cpu
> limitation features (and other scheduling features), and a list of the
> config file options that are available for the new vserver tools in
> general? 

you will require recent 2.6 development kernels to do this

HTH,
Herbert

> Thanks!
> Liam
> 
> _______________________________________________
> Vserver mailing list
> [EMAIL PROTECTED]
> http://list.linux-vserver.org/mailman/listinfo/vserver
_______________________________________________
Vserver mailing list
[EMAIL PROTECTED]
http://list.linux-vserver.org/mailman/listinfo/vserver

Reply via email to