From: Sandino Araico Sánchez (sandino_at_sandino.net)
Date: Tue 30 Mar 2004 - 06:25:43 BST
Lucas Albers wrote:
>I was under the impression that you were not supposed to use gradm with
>vservers?
>
>
The master server can enable/disable /proc/sys/kernel/grsecurity flags
until /proc/sys/kernel/grsecurity/lock is turned on, the chrooted
chcontexted processes inside a vps havs no permission to change
/proc/sys/kernel/grsecurity flags in any time.
The master server can set ACL policies, the chrooted chcontexted
processes inside a vps havs no permission.
Both master and chrooted chcontexted vps can change chpax flags on an
elf binary.
> Incompatible security format, or something?
>
>
-- Sandino Araico Sánchez -- Melón se comió las plumas...._______________________________________________ Vserver mailing list Vserver_at_list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver