Subject: VERIFYCAP problem
From: Tor Rune Skoglund <trs@sg.no>
Date: Tue, 15 Mar 2011 14:43:57 +0100

Doing some testing on a newer kernel here.....

After having created a virtual server, I get the following when trying 
to run it:

----------
# vserver test start
'VERIFYCAP' can be executed as root only
capabilities are not enabled in kernel-setup

Failed to start vserver 'test'
----------

I AM root, so that's not it. Also, googling seems to show that
VERIFYCAP needs kernel CONFIG_SECURITY_CAPABILITIES . However,
there is no such option in my kernel:

platform ~ # grep CAPA /usr/src/linux/.config
platform ~ #

I have tried newer kernels, newer pacthes, newer util-vserver packages,
newer dietlibcs and so on, but are running out of ideas...

Any hints?

Here's more info:

platform ~ # uname -a
Linux platform 2.6.37.2-vs2.3.0.37-rc3.2 #4 Tue Mar 15 13:33:20 CET 2011 
i686 In
tel(R) Core(TM) i7 CPU M 620 @ 2.67GHz GenuineIntel GNU/Linux

platform ~ # vserver-info
Versions:
                    Kernel: 2.6.37.2-vs2.3.0.37-rc3.2
                    VS-API: 0x00020307
                       VCI: 0x0000000013000f91
              util-vserver: 0.30.216-pre2935; Mar  9 2011, 19:05:37

Features:
                        CC: i686-pc-linux-gnu-gcc, i686-pc-linux-gnu-gcc 
(Gentoo 4.4.5 p1.2, pie-0.4.5) 4.4.5
                       CXX: i686-pc-linux-gnu-g++, i686-pc-linux-gnu-g++ 
(Gentoo 4.4.5 p1.2, pie-0.4.5) 4.4.5
                  CPPFLAGS: ''
                    CFLAGS: '-O2 -march=i686 -pipe -std=c99 -Wall 
-pedantic -W -funit-at-a-time'
                  CXXFLAGS: '-O2 -march=i686 -pipe -ansi -Wall -pedantic 
-W -fmessage-length=0 -funit-at-a-time'
                build/host: i686-pc-linux-gnu/i686-pc-linux-gnu
              Use dietlibc: yes
        Build C++ programs: yes
        Build C99 programs: yes
            Available APIs: v13,net,v21,v22,v23,netv2
             ext2fs Source: e2fsprogs
     syscall(2) invocation: alternative
       vserver(2) syscall#: 273/glibc
                crypto api: beecrypt
           python bindings: no
    use library versioning: yes

Paths:
                    prefix: /usr
         sysconf-Directory: /etc
             cfg-Directory: /etc/vservers
          initrd-Directory: $(sysconfdir)/init.d
        pkgstate-Directory: /var/run/vservers
           vserver-Rootdir: /vservers


This is inside a VirtualBox virtual machine. But I cannot see how
that should matter.

- Tor Rune Skoglund