Subject: Re: [vserver] vserver-guest: named does not stop...
From: Herbert Poetzl <herbert@13thfloor.at>
Date: Tue, 16 Nov 2010 22:07:35 +0100

On Tue, Nov 16, 2010 at 09:57:13PM +0100, Jarry wrote:
> On 16. 11. 2010 21:55, Herbert Poetzl wrote:

> >vattribute != nattribute

> obelix ~ # vattribute --get --xid 4000
> bcapabilities:
> CHOWN,DAC_OVERRIDE,DAC_READ_SEARCH,FOWNER,FSETID,KILL,SETGID,SETUID,SETPCAP,NET_BIND_SERVICE,SYS_CHROOT,SYS_PTRACE,SYS_BOOT,SYS_TTY_CONFIG,MKNOD,LEASE,AUDIT_WRITE
> ccapabilities:
> set_utsname,raw_icmp,secure_mount
> flags:
> fakeinit,virt_mem,virt_uptime,virt_cpu,virt_load,hide_netif,state_init,state_admin,sc_helper

> obelix ~ # nattribute --get --nid 4000
> ncapabilities:
> raw_icmp
> nflags:
> hide_netif,state_admin
> obelix ~ #

and what kernel is that?

in any case, the network config is missing
lback_remap and hide_lback to have loopback
insolation working ...

and the hide_netif on the vattributes is
obsolete (at least for all recent kernels)

HTH,
Herbert

> Jarry
> 
> -- 
> _______________________________________________________________
> This mailbox accepts e-mails only from selected mailing-lists!
> Everything else is considered to be spam and therefore deleted.