From: Herbert Poetzl (herbert_at_13thfloor.at)
Date: Fri 26 Mar 2004 - 11:21:39 GMT

• Previous message: lincoln: "[Vserver] Buy C_I_A_L_I_S cheaply! lloyd beautifu"
• In reply to: Lucas Albers: "Re: [Vserver] Can't set the new security context"
• Next in thread: Herbert Poetzl: "Re: [Vserver] Can't set the new security context"

On Thu, Mar 25, 2004 at 11:07:16PM -0700, Lucas Albers wrote:
>
> >> Lucas Albers said:
> >> > When trying to stop a vserver instance I get the following error:
> >> > "Can't set the new security context"
>
> Herbert Poetzl said:
> > yeah, as I said, the tools are broken, send Jacques an
> > email to fix them or get the debian linux-vserver maintainer
> > to do it, or 'just' use the mainstream tools for linux-vserver
>
> So I did a little research...
> I like the vserver debian tools.
> I'm sure the debian maintainer will fix it.
>
> I filed this bug with debian, trivial fix, but I am not a shell programmer:
>
> my debian bug report 240009
> ---------------------------
> It appears you just need to set the S_CONTEXT correctly in
> /usr/sbin/vserver
>
> This appears to be the location:
> in the stop part of /usr/sbin/vserver.
>
> $CHBIND_CMD $SILENT $IPOPT --bcast $IPROOTBCAST \
> S_CONTEXT=
> $CHCONTEXT_CMD $SILENT --secure --ctx $S_CONTEXT \
>
> Now this variable could be easily pulled from:
> /usr/lib/printconf.sh
>
> which could easily source the context from:
> /var/run/servername.ctx
>
> I know the steps to do this, but I am not a shell programmer, and not sure
> of the correct way to fix this.
> I believe this bug is actually critical and not normal, as it is a show
> stopper.

no it isn't because vserver-0.2x isn't maintained but
the replacement util-vserver is (get util-vserver 0.29.3
and everything will work as expected)

http://www.13thfloor.at/vserver/s_release/v1.27/util-vserver-0.29.3.tar.bz2

> Please fix this, as this directly affects my vserver installation.

http://packages.debian.org/unstable/net/util-vserver
(only 3 versions behind the current tools)

http://www.13thfloor.at/vserver/s_release/v1.22/patch-vserver-0.29-fix01.diff
(a very old, partial fix for the broken vserver-0.29 tools)

HTH,
Herbert

> --
> Luke Computer Science System Administrator
> Security Administrator,College of Engineering
> Montana State University-Bozeman,Montana
>
> _______________________________________________
> Vserver mailing list
> Vserver_at_list.linux-vserver.org
> http://list.linux-vserver.org/mailman/listinfo/vserver
_______________________________________________
Vserver mailing list
Vserver_at_list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver

• Previous message: lincoln: "[Vserver] Buy C_I_A_L_I_S cheaply! lloyd beautifu"
• In reply to: Lucas Albers: "Re: [Vserver] Can't set the new security context"
• Next in thread: Herbert Poetzl: "Re: [Vserver] Can't set the new security context"