Subject: Re: [vserver] s_context
From: Herbert Poetzl <herbert@13thfloor.at>
Date: Wed, 30 Sep 2009 13:14:38 +0200

On Wed, Sep 30, 2009 at 08:28:20PM +1300, Michael wrote:
> Hi All,

> man page for  chcontext:
> You must be root, running X.  # We start an xterm in another security
> context /usr/sbin/chcontext xterm &

the man pages are outdated, but I guess patches to
fix them are welcome ...

> got an error:
> vcontext: vc_ctx_create(): Invalid argument

not unexpected, you are missing the --xid argument,
and dynamic contexts have been deprecated since vs1.0
(and got removed in recent patches)

> # Ok, this is PID XX. We need the security context /usr/sbin/chcontext
> --ctx 1 cat /proc/XX/status
> # We see the s_context, this is SS.

> but  s_context doesn't exist

it was removed a long time ago and replaced with
VxID and NxID in /proc/self/status ...

> if I run cat /proc/self/status inside guest - no s_context ,  inside
> host - no s_context.

> Am I doing anything wrong?

> Tried with:
>              Kernel: 2.6.30.5-vs2.3.0.36.14-pre7
>              util-vserver: 0.30.216-pre2841; Sep  3 2009, 16:24:25
> 
>               Kernel: 2.6.31-vs2.3.0.36.14-pre8
>               util-vserver: 0.30.216-pre2841; Aug 21 2009, 12:04:50

no idea what Linux-VServer patch the ones below
contain, but I assume they are recent enough to
have dynamic contexts disabled/removed and VxID
instead of s_context ....

>              Kernel: 2.6.24-23-vserver
>              util-vserver: 0.30.214; Mar 17 2008, 10:23:20
> 
>               Kernel: 2.6.26-2-vserver-686-bigmem
>               util-vserver: 0.30.216-pre2772; Dec 12 2008, 23:24:33

HTC,
Herbert

if you or your company use and like the Linux-VServer project, 
why not consider donating hardware or money, or getting a
service contract with the developers to ensure that it will
live on and continue to provide high quality free software?

> 
> -- 
> --
> Michael