[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

[libvirt] LXC: capset fails with userns



w/ userns:
[root fedora2 ~]# setcap 'cap_net_admin,cap_net_raw+ep' /usr/bin/ping
Failed to set capabilities on file `/usr/bin/ping' (Operation not permitted)
[root fedora2 ~]# id
uid=0(root) gid=0(root) groups=0(root)

w/o userns:
[root fedora2 ~]# setcap 'cap_net_admin,cap_net_raw+ep' /usr/bin/ping
[root fedora2 ~]# getcap /usr/bin/ping
/usr/bin/ping = cap_net_admin,cap_net_raw+ep
[root fedora2 ~]# id
uid=0(root) gid=0(root) groups=0(root)

every yum install <pkg> where the pkg has file capabilities fails with

Error unpacking rpm package <PKG>
error: unpacking of archive failed on file <FILE>: cpio: cap_set_file

is there a way to get this working?

/stephan

-- 
Software is like sex, it's better when it's free!


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]