Subject: Re: [vserver] [Grsec] audit denies pivot_root ?
From: "Rik Bobbaers" <rik@enzoverder.be>
Date: Tue, 23 Nov 2010 13:40:43 +0100 (CET)

> Le 23 nov. 2010 à 10:52, Rik Bobbaers a écrit :
>>>
>>> True. I am usually more interested in the PaX features, but during
>>> testing, this behaviour striked me as odd ... as you said, *audit*
>>> should
>>> not block anything, yet it does, and this is quite unnerving.
>>> Anything I can do to help investigate ?
>>>
>>> Cheers,
>>>
>>> Romain
>>
>> hehe... aside from looking at the grsec code that does the auditting
>> etc... no ;)
>>
>> I'll try to schedule some time in to investigate this further, but i'm
>> rather short on time lately :(
>
> I know the feeling, far from me the idea of holding a grudge against you
> :-)
> I'll try with PaX only and see if I still get these general protection
> faults, otherwise it will be plain VServer.
>
> Cheers !
>
> Romain

why not just disable chroot restrictions and leave the rest on?

Rik Bobbaers

-- http://harry.enzoverder.be
linux/unix/system/network/security/hardware admin
infrastructure architect