Subject: Re: [vserver] [Grsec] audit denies pivot_root ?
From: Romain Riviere <romain.riviere@gmail.com>
Date: Sun, 21 Nov 2010 17:53:20 +0100

 Sun, 21 Nov 2010 17:53:20 +0100
Hello,

Le 19 nov. 2010 à 17:22, Romain Riviere a écrit :

> Hello,
> 
> Le 19 nov. 2010 à 16:54, Rik Bobbaers a écrit :
> 
>>> The problem is that "vserver <name> start" fails with "vcontext:
>> 
>> check this one...:
>> 
>>> pivot root(): Invalid argument"<snip>
>> kernel.grsecurity.chroot deny pivot = 1
>> 
>> looks quite obvious... :)
> 
> It's not: the exact same behaviour is displayed when chroot deny pivot is set to 0.

Harry, just to confirm one thing, as I have been playing a lot with grsec flags. The
following setup *ALWAYS* causes the pivot root error:
kernel.grsecurity.audit mount=1
kernel.grsecurity.audit chdir=0
kernel.grsecurity.chroot deny pivot=0

Cheers,