Re: [Vserver] can't terminate OpenVPN tunnel within a vserver?:
 vserver development mailing list 
[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]

Re: [Vserver] can't terminate OpenVPN tunnel within a vserver?

From: Daniel W. Crompton <daniel.crompton_at_gmail.com>
Date: Tue 04 Jul 2006 - 09:29:24 BST
Message-ID: <c17f91900607040129o3da13d12s256822a46039bb5b@mail.gmail.com>

On 7/3/06, Eugen Leitl <eugen@leitl.org> wrote:
> On Mon, Jul 03, 2006 at 12:12:34PM +0200, Baltasar Cevc wrote:
> > >I can't have an OpenVPN tunnel terminate in a vserver,
> > >can I?

You can, I just did it yesterday. You need to set the following in the
file "bcapabilities":
CAP_NET_ADMIN
CAP_NET_RAW

Add if you want to load the module inside the vserver on access:
CAP_SYS_MODULE

Add if you want to mknod the device inside the vserver:
CAP_MKNOD

And in the file "flags" you need to set:
~hide_netif

D.

blaze your trail 

--
redhat
_______________________________________________
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver
Received on Tue Jul 4 09:29:51 2006
[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Tue 04 Jul 2006 - 09:30:25 BST by hypermail 2.1.8