OpenVZ Forum


Home » General » Support » openvpn and tap/bridging with a "dummy" network adapter?
Re: openvpn and tap/bridging with a "dummy" network adapter? [message #1791 is a reply to message #1787] Fri, 24 February 2006 09:02 Go to previous messageGo to previous message
dev is currently offline  dev
Messages: 1693
Registered: September 2005
Location: Moscow
Senior Member

from what I see from sources:
        case BRCTL_ADD_BRIDGE:
        case BRCTL_DEL_BRIDGE:
        {
                char buf[IFNAMSIZ];

                if (!capable(CAP_NET_ADMIN))
                        return -EPERM;

                if (copy_from_user(buf, (void __user *)args[1], IFNAMSIZ))
                        return -EFAULT;

                buf[IFNAMSIZ-1] = 0;

                if (args[0] == BRCTL_ADD_BRIDGE)
                        return br_add_bridge(buf);

                return br_del_bridge(buf);
        }


CAP_NET_ADMIN (net_admin) should be enough...
you can add all the capabilities to your VPS at first, we can resolve this later. But `strace -f brctl addbr br0` would help to do it now Smile))

We don't have description of capabilities in the man page, since this is a standart security model of Linux kernel...


http://static.openvz.org/userbars/openvz-developer.png

[Updated on: Fri, 24 February 2006 09:02]

Report message to a moderator

 
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message icon14.gif
Read Message
Read Message
Read Message
Read Message
Read Message
Previous Topic: VPS cannot shutdown
Next Topic: Using Ksplice for kernel updates
Goto Forum:
  


Current Time: Sun Aug 03 06:32:57 GMT 2025

Total time taken to generate the page: 0.49111 seconds