Subject: Re: [vserver] monitoring all contexts? (super context!)
From: Corey Wright <undefined@pobox.com>
Date: Wed, 10 Mar 2010 22:03:48 -0600

On Wed, 10 Mar 2010 23:49:20 +0000
Ed W <lists@wildgooses.com> wrote:

> On 09/03/2010 16:05, Corey Wright wrote:
> >
> >> i'm not running with the grsec patch, but i believe the attached
> >> script/wrapper deals with your /proc problem (if i remember correctly).
> >>      
> >
> 
> This appears to be spot on - many thanks
> 
> The trick appears to be the:
> 
> 	$__SBINDIR/setattr --watch /proc/vmstat
> 
> I don't seem to have any man pages for setattr (which could be my duff
> installation...) - where might I find out more about how this incantation
> is doing it's thing please?

http://wiki.linux-vserver.org/Secure_ProcFS_Entries
http://wiki.linux-vserver.org/Filesystem_attributes
http://svn.linux-vserver.org/projects/util-vserver/browser/trunk/src/setattr.c

$ /usr/sbin/setattr --help
Usage:  /usr/sbin/setattr [-Rx] [--[~](iunlink|admin|watch|hide|barrier|
iunlink-but-not-immutable|immutable|write)]* [--] <file>+

 Options:
   -R  ...  recurse through directories
   -x  ...  do not cross filesystems

Please report bugs to vserver@list.linux-vserver.org

> Thanks again

no prob.

> Ed W

corey
-- 
undefined@pobox.com