Subject: Re: [vserver] Can't see all my processes?
From: Ed W <lists@wildgooses.com>
Date: Tue, 13 May 2008 20:20:19 +0100

Hi

> It's GRKERNSEC_CHROOT_FINDTASK. It should be either disabled in kernel or
> by kernel.grsecurity.chroot_findtask=0 sysctl.

Spot - this was the culprit - thanks

> config GRKERNSEC_CHROOT_FINDTASK
>         bool "Protect outside processes"
>         depends on GRKERNSEC_CHROOT
>         help
>           If you say Y here, processes inside a chroot will not be 
> able to
>           kill, send signals with fcntl, ptrace, capget, getpgid, getsid,
>           or view any process outside of the chroot.

The description is incorrect in the sense that it implies it only works 
one way, but in fact it appears to work both ways, ie the parent can't 
see the chrooted process either (or perhaps this is a bug?)

Oh well

Thanks

Ed W