Sun, 21 Nov 2010 17:53:20 +0100
Hello,
Le 19 nov. 2010 à 17:22, Romain Riviere a écrit :
> Hello,
>
> Le 19 nov. 2010 à 16:54, Rik Bobbaers a écrit :
>
>>> The problem is that "vserver <name> start" fails with "vcontext:
>>
>> check this one...:
>>
>>> pivot root(): Invalid argument"<snip>
>> kernel.grsecurity.chroot deny pivot = 1
>>
>> looks quite obvious... :)
>
> It's not: the exact same behaviour is displayed when chroot deny pivot is set to 0.
Harry, just to confirm one thing, as I have been playing a lot with grsec flags. The
following setup *ALWAYS* causes the pivot root error:
kernel.grsecurity.audit mount=1
kernel.grsecurity.audit chdir=0
kernel.grsecurity.chroot deny pivot=0
Cheers,