root@hn01:~# tail -n4 /etc/vz/conf/*99*.conf
==> /etc/vz/conf/199.conf <==
NAMESERVER="200.165.132.155 200.149.55.140"
NAME="vps199"
DEVNODES="drbd1:rw vg_openvz/drbd_199:rw mapper/vg_openvz-drbd_199:rw"
CAPABILITY="CHOWN:on DAC_OVERRIDE:on DAC_READ_SEARCH:on SETUID:on NET_ADMIN:on NET_RAW:on SYS_MODULE:on SYS_RAWIO:on SYS_PACCT:on MKNOD:on VE_ADMIN:on "
==> /etc/vz/conf/99.conf <==
NAMESERVER="200.165.132.155 200.149.55.140"
NAME="vps99"
DEVNODES="drbd0:rw vg_openvz/drbd_99:rw mapper/vg_openvz-drbd_99:rw "
CAPABILITY="CHOWN:on DAC_OVERRIDE:on DAC_READ_SEARCH:on SETUID:on NET_ADMIN:on NET_RAW:on SYS_MODULE:on SYS_RAWIO:on SYS_PACCT:on MKNOD:on VE_ADMIN:on "

root@hn01:~# vzctl exec2 99 /etc/init.d/drbd start
Starting DRBD resources:    [ d0 ioctl(,SET_DISK_CONFIG,) failed: Operation not permitted

cmd /sbin/drbdsetup /dev/drbd0 disk /dev/vg_openvz/drbd_99 internal -1 --on-io-error=pass_on  failed!

root@hn01:~# vzctl exec2 99 lcap
Current capabilities: 0xFFFFFEFF
   0) *CAP_CHOWN                   1) *CAP_DAC_OVERRIDE
   2) *CAP_DAC_READ_SEARCH         3) *CAP_FOWNER
   4) *CAP_FSETID                  5) *CAP_KILL
   6) *CAP_SETGID                  7) *CAP_SETUID
   8)  CAP_SETPCAP                 9) *CAP_LINUX_IMMUTABLE
  10) *CAP_NET_BIND_SERVICE       11) *CAP_NET_BROADCAST
  12) *CAP_NET_ADMIN              13) *CAP_NET_RAW
  14) *CAP_IPC_LOCK               15) *CAP_IPC_OWNER
  16) *CAP_SYS_MODULE             17) *CAP_SYS_RAWIO
  18) *CAP_SYS_CHROOT             19) *CAP_SYS_PTRACE
  20) *CAP_SYS_PACCT              21) *CAP_SYS_ADMIN
  22) *CAP_SYS_BOOT               23) *CAP_SYS_NICE
  24) *CAP_SYS_RESOURCE           25) *CAP_SYS_TIME
  26) *CAP_SYS_TTY_CONFIG         27) *CAP_MKNOD
  28) *CAP_LEASE                  29) *CAP_AUDIT_WRITE
  30) *CAP_AUDIT_CONTROL
    * = Capabilities currently allowed