On Tue, Nov 16, 2010 at 09:57:13PM +0100, Jarry wrote:
> On 16. 11. 2010 21:55, Herbert Poetzl wrote:
> >vattribute != nattribute
> obelix ~ # vattribute --get --xid 4000
> bcapabilities:
> CHOWN,DAC_OVERRIDE,DAC_READ_SEARCH,FOWNER,FSETID,KILL,SETGID,SETUID,SETPCAP,NET_BIND_SERVICE,SYS_CHROOT,SYS_PTRACE,SYS_BOOT,SYS_TTY_CONFIG,MKNOD,LEASE,AUDIT_WRITE
> ccapabilities:
> set_utsname,raw_icmp,secure_mount
> flags:
> fakeinit,virt_mem,virt_uptime,virt_cpu,virt_load,hide_netif,state_init,state_admin,sc_helper
> obelix ~ # nattribute --get --nid 4000
> ncapabilities:
> raw_icmp
> nflags:
> hide_netif,state_admin
> obelix ~ #
and what kernel is that?
in any case, the network config is missing
lback_remap and hide_lback to have loopback
insolation working ...
and the hide_netif on the vattributes is
obsolete (at least for all recent kernels)
HTH,
Herbert
> Jarry
>
> --
> _______________________________________________________________
> This mailbox accepts e-mails only from selected mailing-lists!
> Everything else is considered to be spam and therefore deleted.