LINUX.ORG.RU
ФорумAdmin

OpenVZ & Hardened - Unable to set capability: Operation not permitted


0

0

Пытаюсь запустить

freehost ~ # vzctl start 800 
Starting container ...
Container is mounted
Unable to set capability: Operation not permitted
Unable to set capability
Container start failed
Container is unmounted
freehost ~ # cat /var/log/vzctl.log 
.........
2009-08-17T03:11:56+0300 vzctl : CT 800 : Starting container ...
2009-08-17T03:11:57+0300 vzctl : CT 800 : Container is mounted
2009-08-17T00:11:57+0000 vzctl : CT 800 : Unable to set capability: Operation not permitted
2009-08-17T03:11:57+0300 vzctl : CT 800 : Unable to set capability
2009-08-17T03:11:57+0300 vzctl : CT 800 : Container start failed
2009-08-17T03:11:57+0300 vzctl : CT 800 : Container is unmounted
freehost ~ # cat /var/log/grsec.log 
Aug 17 03:11:57 freehost grsec: From 82.193.97.240: mount of /vz/private/800 to /vz/root/800 by /usr/sbin/vzctl[vzctl:3687] uid/euid:0/0 gid/egid:0/0, parent /bin/bash[bash:3230] uid/euid:0/0 gid/egid:0/0
Aug 17 03:11:57 freehost grsec: From 82.193.97.240: unmount of /vz/private/800 by /usr/sbin/vzctl[vzctl:3687] uid/euid:0/0 gid/egid:0/0, parent /bin/bash[bash:3230] uid/euid:0/0 gid/egid:0/0


# gradm -DV
The operation you requested cannot be performed because the RBAC system is currently disabled.

ядро стоит отсюда: http://git.niifaq.ru/openvz-2.6.27-hardened/ какие опции pax или grsec могут так работать? rbac не включен

нашел опцию в pax, capability chroot restrictions или как то так называется. выключил - работает

nbdarvin
() автор топика
Вы не можете добавлять комментарии в эту тему. Тема перемещена в архив.