[libvirt] LXC: capset fails with userns

Stephan Sachse ste.sachse at gmail.com
Tue Feb 25 15:50:47 UTC 2014


w/ userns:
[root at fedora2 ~]# setcap 'cap_net_admin,cap_net_raw+ep' /usr/bin/ping
Failed to set capabilities on file `/usr/bin/ping' (Operation not permitted)
[root at fedora2 ~]# id
uid=0(root) gid=0(root) groups=0(root)

w/o userns:
[root at fedora2 ~]# setcap 'cap_net_admin,cap_net_raw+ep' /usr/bin/ping
[root at fedora2 ~]# getcap /usr/bin/ping
/usr/bin/ping = cap_net_admin,cap_net_raw+ep
[root at fedora2 ~]# id
uid=0(root) gid=0(root) groups=0(root)

every yum install <pkg> where the pkg has file capabilities fails with

Error unpacking rpm package <PKG>
error: unpacking of archive failed on file <FILE>: cpio: cap_set_file

is there a way to get this working?

/stephan

-- 
Software is like sex, it's better when it's free!




More information about the libvir-list mailing list