Editing
0427.html
From Linix VServer
Jump to navigation
Jump to search
Warning:
You are not logged in. Your IP address will be publicly visible if you make any edits. If you
log in
or
create an account
, your edits will be attributed to your username, along with other benefits.
Anti-spam check. Do
not
fill this in!
<div class="links"> '''RE: RE: [Vserver] Rpms for vserver 0.27 (got it):'''<br /> Β <span class="small">vserver development mailing list</span>Β <br /> [<nowiki/>[[../|Next/Previous Months]]] [<nowiki/>[http://www.solucorp.qc.ca/miscprj/s_context.hc Main vserver Project Homepage]] [<nowiki/>[http://www.solucorp.qc.ca/mlist/index.hc?list=vserver Howto Subscribe/Unsubscribe]] [<nowiki/>[http://www.paul.sladen.org/vserver/ Paul Sladen's vserver stuff]] </div> <div align="center"> {| class="wikitable" border="2" width="100%" |- ! [[../|About this list]] ! [[date.html|Date view]] ! [[index.html|Thread view]] ! [[subject.html|Subject view]] ! [[author.html|Author view]] ! [[attachment.html|Attachment view]] |} </div> '''From:''' Charles Dale ([mailto:bug_at_aphid.net?Subject=RE:%20RE:%20%5BVserver%5D%20Rpms%20for%20vserver%200.27%20(got%20it) ''bug_at_aphid.net''])<br /> '''Date:''' Wed 26 Nov 2003 - 05:50:39 GMT * '''Previous message:''' [[0426.html|mile1_at_bellsouth.net: "RE: RE: [Vserver] Rpms for vserver 0.27 (got it)"]] * '''In reply to:''' [[0426.html|mile1_at_bellsouth.net: "RE: RE: [Vserver] Rpms for vserver 0.27 (got it)"]] * '''Next in thread:''' [[0433.html|Alex Lyashkov: "Re: RE: [Vserver] Rpms for vserver 0.27 (got it)"]] * '''Reply:''' [[0433.html|Alex Lyashkov: "Re: RE: [Vserver] Rpms for vserver 0.27 (got it)"]] ----- It's a bit hard to read what you posted because after a certain point all<br /> the hard returns seem to have been folded. But I think you have this in your<br /> redhat9.conf:<br /> S_CAPS="CAP_NET_RAW CAP_SYS_ADMIN CAP_NET_ADMIN"<br /> Change that to<br /> S_CAPS="CAP_NET_RAW CAP_SYS_RESOURCE"<br /> Do you really need CAP_SYS_ADMIN and CAP_NET_ADMIN in the vserver? Setting<br /> those for a vserver is like running "chmod -R 777 /". i.e. it's not a good<br /> idea unless you have an MS-DOS view of security...<br /> Chuck<br /> ''> -----Original Message-----''<br /> ''> From: [mailto:vserver-admin_at_list.linux-vserver.org?Subject=RE:%20RE:%20%5BVserver%5D%20Rpms%20for%20vserver%200.27%20(got%20it) vserver-admin_at_list.linux-vserver.org]''<br /> ''> [mailto:[mailto:vserver-admin_at_list.linux-vserver.org?Subject=RE:%20RE:%20%5BVserver%5D%20Rpms%20for%20vserver%200.27%20(got%20it) vserver-admin_at_list.linux-vserver.org]] On Behalf Of''<br /> ''> [mailto:mile1_at_bellsouth.net?Subject=RE:%20RE:%20%5BVserver%5D%20Rpms%20for%20vserver%200.27%20(got%20it) mile1_at_bellsouth.net]''<br /> ''> Sent: Wednesday, 26 November 2003 4:30 PM''<br /> ''> To: [mailto:vserver_at_list.linux-vserver.org?Subject=RE:%20RE:%20%5BVserver%5D%20Rpms%20for%20vserver%200.27%20(got%20it) vserver_at_list.linux-vserver.org]''<br /> ''> Subject: RE: RE: [Vserver] Rpms for vserver 0.27 (got it)''<br /> ''>''<br /> ''>''<br /> ''> Here it is,''<br /> ''>''<br /> ''> Last login: Sun Nov 23 21:53:32 2003''<br /> ''> [root_at_rdhat01 root]# ls''<br /> ''> anaconda-ks.cfg install.log install.log.syslog vps''<br /> ''> [root_at_rdhat01 root]# vi /etc/vservers/redhat9.conf #''<br /> ''> Description: RedHat 9 VPS Server''<br /> ''>''<br /> ''> if [ "" = "" ]; then''<br /> ''> PROFILE=prod''<br /> ''> fi''<br /> ''> case $PROFILE in''<br /> ''> prod)''<br /> ''> # Select the IP number(s) assigned to the virtual server''<br /> ''> # These IPs will be defined as IP alias''<br /> ''> # The alias will be setup on IPROOTDEV''<br /> ''> # You can specify the device if needed''<br /> ''> # IPROOT="eth0:1.2.3.4 eth1:3.4.5.6"''<br /> ''> IPROOT="172.16.0.109"''<br /> ''> # You can define on which device the IP alias will be done''<br /> ''> # The IP alias will be set when the server is started''<br /> ''> and unset''<br /> ''> # when the server is stopped''<br /> ''> # The netmask and broadcast are computed by default''<br /> ''> from IPROOTDEV''<br /> ''> #IPROOTMASK=''<br /> ''> #IPROOTBCAST=''<br /> ''> IPROOTDEV=eth0''<br /> ''> # You can set a different host name for the vserver''<br /> ''> # If empty, the host name of the main server is used''<br /> ''> S_HOSTNAME=redhat9.icanreach.com''<br /> ''> ;;''<br /> ''> backup)''<br /> ''> IPROOT=""''<br /> ''> #IPROOTMASK=''<br /> ''> #IPROOTBCAST=''<br /> ''> IPROOTDEV=eth0''<br /> ''> S_HOSTNAME=''<br /> ''> ;;''<br /> ''> esac''<br /> ''> # Set ONBOOT to yes or no if you want to enable this''<br /> ''> # virtual server at boot time''<br /> ''> ONBOOT=yes''<br /> ''> # Control the start order of the vservers''<br /> ''> # Lower value start first''<br /> ''> PRIORITY=100''<br /> ''> # You can set a different NIS domain for the vserver''<br /> ''> # If empty, the current on is kept''<br /> ''> # Set it to "none" to have no NIS domain set''<br /> ''> S_DOMAINNAME=''<br /> ''> # You can set the priority level (nice) of all process in the''<br /> ''> vserver # Even root won't be able to raise it S_NICE= # You''<br /> ''> can set various flags for the new security context # lock:''<br /> ''> Prevent the vserver from setting new security context #''<br /> ''> sched: Merge scheduler priority of all processes in the vserver''<br /> ''> # so that it acts a like a single one.''<br /> ''> # nproc: Limit the number of processes in the vserver''<br /> ''> according to ulimit''<br /> ''> # (instead of a per user limit, this becomes a per''<br /> ''> vserver limit)''<br /> ''> # private: No other process can join this security context.''<br /> ''> Even root # Do not forget the quotes around the flags''<br /> ''> S_FLAGS="lock nproc" # You can set various ulimit flags and''<br /> ''> they will be inherited by the # vserver. You enter here''<br /> ''> various command line argument of ulimit # ULIMIT="-H -u 200"''<br /> ''> # The example above, combined with the nproc S_FLAGS will''<br /> ''> limit the # vserver to a maximum of 200 processes ULIMIT="-HS''<br /> ''> -u 1000" # You can set various capabilities. By default, the''<br /> ''> vserver are run # with a limited set, so you can let root run''<br /> ''> in a vserver and not # worry about it. He can\'t take over''<br /> ''> the machine. In some cases # you can to give a little more''<br /> ''> capabilities \(such as CAP_NET_RAW\) # S_CAPS="CAP_NET_RAW"''<br /> ''> S_CAPS="CAP_NET_RAW CAP_SYS_ADMIN CAP_NET_ADMIN" # Select an''<br /> ''> unused context (this is optional) # The default is to''<br /> ''> allocate a free context on the fly # In general you don't''<br /> ''> need to force a context #S_CONTEXT=''<br /> ''>''<br /> ''> >''<br /> ''> > From: "Charles Dale" <[mailto:bug_at_aphid.net?Subject=RE:%20RE:%20%5BVserver%5D%20Rpms%20for%20vserver%200.27%20(got%20it) bug_at_aphid.net]>''<br /> ''> > Date: 2003/11/25 Tue PM 08:16:37 EST''<br /> ''> > To: <[mailto:vserver_at_list.linux-vserver.org?Subject=RE:%20RE:%20%5BVserver%5D%20Rpms%20for%20vserver%200.27%20(got%20it) vserver_at_list.linux-vserver.org]>''<br /> ''> > Subject: RE: RE: [Vserver] Rpms for vserver 0.27 (got it)''<br /> ''> >''<br /> ''> > [snip]''<br /> ''> >''<br /> ''> > > Nov 24 12:00:13 redhat9 named: named: capset failed: Operation not''<br /> ''> > permitted''<br /> ''> > > Nov 24 12:00:13 redhat9 named: named startup failed''<br /> ''> >''<br /> ''> > Looks to me like CAP_SYS_RESOURCE hasn't been enabled for''<br /> ''> some reason''<br /> ''> > for that vserver. Please post contents of the vserver conf file.''<br /> ''> >''<br /> ''> > BTW, (to list in general), how do I easily find out which caps a''<br /> ''> > particular context has?''<br /> ''> >''<br /> ''> > Chuck''<br /> ''> >''<br /> ''> > _______________________________________________''<br /> ''> > Vserver mailing list''<br /> ''> > [mailto:Vserver_at_list.linux-vserver.org?Subject=RE:%20RE:%20%5BVserver%5D%20Rpms%20for%20vserver%200.27%20(got%20it) Vserver_at_list.linux-vserver.org]''<br /> ''> > http://list.linux-vserver.org/mailman/listinfo/vserver''<br /> ''> >''<br /> ''>''<br /> ''> _______________________________________________''<br /> ''> Vserver mailing list''<br /> ''> [mailto:Vserver_at_list.linux-vserver.org?Subject=RE:%20RE:%20%5BVserver%5D%20Rpms%20for%20vserver%200.27%20(got%20it) Vserver_at_list.linux-vserver.org]''<br /> ''> http://list.linux-> vserver.org/mailman/listinfo/vserver''<br /> ''>''<br /> _______________________________________________<br /> Vserver mailing list<br /> [mailto:Vserver_at_list.linux-vserver.org?Subject=RE:%20RE:%20%5BVserver%5D%20Rpms%20for%20vserver%200.27%20(got%20it) Vserver_at_list.linux-vserver.org]<br /> http://list.linux-vserver.org/mailman/listinfo/vserver<br /> ----- * '''Previous message:''' [[0426.html|mile1_at_bellsouth.net: "RE: RE: [Vserver] Rpms for vserver 0.27 (got it)"]] * '''In reply to:''' [[0426.html|mile1_at_bellsouth.net: "RE: RE: [Vserver] Rpms for vserver 0.27 (got it)"]] * '''Next in thread:''' [[0433.html|Alex Lyashkov: "Re: RE: [Vserver] Rpms for vserver 0.27 (got it)"]] * '''Reply:''' [[0433.html|Alex Lyashkov: "Re: RE: [Vserver] Rpms for vserver 0.27 (got it)"]] <div align="center"> {| class="wikitable" border="2" width="100%" |- ! [[../|About this list]] ! [[date.html|Date view]] ! [[index.html|Thread view]] ! [[subject.html|Subject view]] ! [[author.html|Author view]] ! [[attachment.html|Attachment view]] |} </div> <div align="center"> [<nowiki/>[[../|Next/Previous Months]]] [<nowiki/>[http://www.solucorp.qc.ca/miscprj/s_context.hc Main vserver Project Homepage]] [<nowiki/>[http://www.solucorp.qc.ca/mlist/index.hc?list=vserver Howto Subscribe/Unsubscribe]] [<nowiki/>[http://www.paul.sladen.org/vserver/ Paul Sladen's vserver stuff]]<br /> <span class="small">Generated on Wed 26 Nov 2003 - 05:51:21 GMT by [http://www.hypermail.org/ hypermail 2.1.3]</span> </div>
Summary:
Please note that all contributions to Linix VServer may be edited, altered, or removed by other contributors. If you do not want your writing to be edited mercilessly, then do not submit it here.
You are also promising us that you wrote this yourself, or copied it from a public domain or similar free resource (see
Linix VServer:Copyrights
for details).
Do not submit copyrighted work without permission!
Cancel
Editing help
(opens in new window)
Navigation menu
Page actions
Page
Discussion
Read
Edit
History
Page actions
Page
Discussion
More
Tools
Personal tools
Not logged in
Talk
Contributions
Create account
Log in
About
Overview
Paper
News
Developers
Donations
Search
Getting Started
Downloads
FAQs
Documentation
Support
Participate
How to participate
Report a Bug
Communicate
Teams/Projects
Hall of Fame
Resources
Archives
Recent Wiki Changes
Pastebin
Related Projects
VServer Hosting
Happy VServer Users
Tools
What links here
Related changes
Special pages
Page information