Subject: Re: [vserver] Operation not permitted
From: Guenther Fuchs <vserver@muh.at>
Date: Tue, 30 Oct 2007 18:51:01 +0100

Hi there,

on Tuesday, October 30, 2007 at 2:50:08 PM there was posted:

echo "CAP_NET_RAW" > /etc/vservers/${YOUR_GUEST}/bcapabilities

That does it, true - but it also opens the RAW access to the
net-interface which makes it able to "listen" to the net traffic of
_all_ guests from within that one - and that is a serious security
hole.

-- 
regards 'n greez,

Guenther Fuchs
(aka "muh" and "powerfox")