[libvirt] LXC: capset fails with userns
Stephan Sachse
ste.sachse at gmail.com
Tue Feb 25 15:50:47 UTC 2014
w/ userns:
[root at fedora2 ~]# setcap 'cap_net_admin,cap_net_raw+ep' /usr/bin/ping
Failed to set capabilities on file `/usr/bin/ping' (Operation not permitted)
[root at fedora2 ~]# id
uid=0(root) gid=0(root) groups=0(root)
w/o userns:
[root at fedora2 ~]# setcap 'cap_net_admin,cap_net_raw+ep' /usr/bin/ping
[root at fedora2 ~]# getcap /usr/bin/ping
/usr/bin/ping = cap_net_admin,cap_net_raw+ep
[root at fedora2 ~]# id
uid=0(root) gid=0(root) groups=0(root)
every yum install <pkg> where the pkg has file capabilities fails with
Error unpacking rpm package <PKG>
error: unpacking of archive failed on file <FILE>: cpio: cap_set_file
is there a way to get this working?
/stephan
--
Software is like sex, it's better when it's free!
More information about the libvir-list
mailing list