Re: [Vserver] Using strace in a virtual context

2004-10-14 Thread Erik Smit
would help me alot. I'm not asking for a > > fix, since I will eventually upgrade the system anyway. http://www.ussg.iu.edu/hypermail/linux/kernel/0304.0/1062.html I'm just guessing by your kernelversion number you've applied this patch. I could be totally wrong though. :) Rega

Re: [Vserver] Tiny system for template...

2004-04-02 Thread Erik Smit
onally just let the hosts syslog-ng listen to the /dev/log in the vserver and have the hosts vserver scripts handle the stopping/starting. No need for even a /bin/sh or /lib in my vservers. :) Regards, Erik Smit ___ Vserver mailing list [EMAIL PROTECTE

Re: [Vserver] TTY logging ...

2004-02-22 Thread Erik Smit
Hi Herbert, I would be interested in this feature. It's sometimes hard to pin-point the cause of some abuse on your machine and if you can log the ttys you can actually see somebody doing it. Regards, Erik Smit On Sat, Feb 21, 2004 at 11:46:08PM +0100, Herbert Poetzl wrote: > &g

Re: [Vserver] [Info] Compiling 1.3.x on debian

2004-02-15 Thread Erik Smit
Hi Herbert, This only happens on Debian Woody. Upgrading to Sarge fixed this for me. Regards, Erik Smit On Sat, Feb 14, 2004 at 11:09:29PM +0100, Herbert Poetzl wrote: > > Hi Community! > > I don't know why, but debian toolchain seems to > mislike switch() statements wit

Re: [Vserver] root-exploit still working with 1.26 and util 0.28!

2004-02-08 Thread Erik Smit
he exploit chmods it to 001. I fell for this one also. :) Regards, Erik Smit ___ Vserver mailing list [EMAIL PROTECTED] http://list.linux-vserver.org/mailman/listinfo/vserver

Re: [Vserver] sometimes vserver do not ping

2004-02-03 Thread Erik Smit - Zylon
On Tue, Feb 03, 2004 at 05:16:14PM +0100, Gebhardt Thomas wrote: > 1. The router did not send an arp request. > 2. The host did not receive the request for some reason > 3. The host did not answer the request > 4. The router did not cache the answer tcpdump is your friend. :) Regards

[Vserver] S_START/S_STOP

2004-01-19 Thread Erik Smit
ndard /sbin/init or /sbin/rc. It would be nice if this was integrated since I'm applying this patch every new version. If not, please tell me why. If anybody else has any comments on or question about this, please fire away. Regards, Erik Smit

Re: [Vserver] High Port Pass through??

2004-01-10 Thread Erik Smit
Ok, but outgoing connections cause traffic originating from high ports already. This has nothing to do with the SNAT. Regards, Erik Smit On Sat, Jan 10, 2004 at 07:50:12PM -, Lu?s Miguel Silva wrote: > I use SNAT to let my vservers connect to the internet because otherwise the > p

Re: [Vserver] High Port Pass through??

2004-01-10 Thread Erik Smit
less you configured netfilter (iptables/ipchains/etc.) to do that, no. (afaik) Regards, Erik Smit ___ Vserver mailing list [EMAIL PROTECTED] http://list.linux-vserver.org/mailman/listinfo/vserver

Re: [Vserver] High Port Pass through??

2004-01-10 Thread Erik Smit
(or a firewall log) Regards, Erik Smit ___ Vserver mailing list [EMAIL PROTECTED] http://list.linux-vserver.org/mailman/listinfo/vserver

Re: [Vserver] do_brk exploit...vserver

2003-12-23 Thread Erik Smit
ause the the modprobe it attached to was running as CTX-0. So I wouldn't be surprised if another kernel exploit would also be able to break out of a vserver. It only protects against userlevel exploits. Regards, Erik Smit ___ Vserver mailing list [EMAIL PROTECTED] http://list.linux-vserver.org/mailman/listinfo/vserver

Re: Re[2]: [Vserver] Stable vs1.20 + grsecurity + ippersonality

2003-12-08 Thread Erik Smit
ine has been running for 6 hours now with users working on it and I haven't seen any unexpected sideeffects yet, so it looks stable to me. Regards, Erik Smit ___ Vserver mailing list [EMAIL PROTECTED] http://list.linux-vserver.org/mailman/listinfo/vserver

Re: [Vserver] ssh X11 forwarding (after vserver xxx enter)

2003-11-11 Thread Erik Smit
socket on the master server. > That's part of the vserver concept, isn't it? Well, I've bind-mounted my mysqld-vserver socket into my webserver-vserver and it's able to communicate with it, even though they run in different contexts. -- Regards, Erik Smit __