[Users] Re: Capabilities

[Kirill Korotaev]

Benny Amorsen wrote:
>>>>>>"KK" == Kirill Korotaev <dev at sw.ru> writes:
> 
> 
> KK> No, it looks like you used non-OVZ config and disabled OVZ options
> KK> like CONFIG_FAIRSCHED and CONFIG_SCHED_VCPU. So compilation
> KK> failed. So this one is not related to zebra/capabilities.
> 
> $ egrep '(CONFIG_FAIRSCHED|CONFIG_SCHED_VCPU)' kernel-2.6.18-x86_64-smp.config.ovz.ba 
> CONFIG_SCHED_VCPU=y
> CONFIG_FAIRSCHED=y
> 
> $ diff -u SOURCES/kernel-2.6.18-x86_64-smp.config.ovz SOURCES/kernel-2.6.18-x86_64-smp.config.ovz.ba
> --- SOURCES/kernel-2.6.18-x86_64-smp.config.ovz 2007-02-27 13:27:56.000000000 +0100
> +++ SOURCES/kernel-2.6.18-x86_64-smp.config.ovz.ba     2007-03-14 10:19:24.000000000 +0100
> @@ -1631,7 +1631,12 @@
>  # Security options
>  #
>  # CONFIG_KEYS is not set
> -# CONFIG_SECURITY is not set
> +CONFIG_SECURITY=y
> +CONFIG_SECURITY_NETWORK=y
> +# CONFIG_SECURITY_NETWORK_XFRM is not set
> +CONFIG_SECURITY_CAPABILITIES=y
> +# CONFIG_SECURITY_ROOTPLUG is not set
> +# CONFIG_SECURITY_SECLVL is not set
Ahh... I forget that CONFIG_SECURITY automatically disables CONFIG_VE due to:
kernel/Kconfig.openvz:
config VE
        bool "Virtual Environment support"
        default y
        depends on !SECURITY		<<<< this!
So if you remove this line it should be better.

Thanks,
Kirill