[ATrpms-users] Re: kernel-2.6.10-1.770_14.rhfc3.at breaks named

[Axel Thimm]

Are you running selinux?

It looks like a combination of selinux and CONFIG_SECURITY_CAPABILITIES=m.

There were requests to make CONFIG_SECURITY_CAPABILITIES modular to
allow for building dazuko against it. selinux enabled boxes might need
to modprobe capability before named is started.

Could you check this? Thanks!

On Sat, Mar 12, 2005 at 12:10:45PM -0500, Phil Schaffner wrote:
> After updating to kernel-2.6.10-1.770_14.rhfc3.at named (for local
> caching nameserver) stopped working.
> 
> >From /var/log/messages:
> 
> Mar 12 10:23:42 tabb1 named: named:
> Mar 12 10:23:42 tabb1 named: capset failed: Operation not permitted:
> please ensure that the capset kernel module is loaded.  see insmod(8)
> 
> FC3 kernel-2.6.10-1.770_FC3 works.
> 
> [root at tabb1 ~]# strings /boot/System.map-2.6.10-1.770_FC3 | grep capset
> c01229d0 T sys_capset
> c01bc5a2 t dummy_capset_check
> c01bc5a6 t dummy_capset_set
> c01c08dc t selinux_capset_check
> c01c090c t selinux_capset_set
> c01cc1bd T cap_capset_check
> c01cc207 T cap_capset_set
> c03361a0 r __ksymtab_cap_capset_check
> c03361a8 r __ksymtab_cap_capset_set
> c033a1b4 r __kcrctab_cap_capset_check
> c033a1b8 r __kcrctab_cap_capset_set
> c033f444 r __kstrtab_cap_capset_check
> c033f455 r __kstrtab_cap_capset_set
> [root at tabb1 ~]# strings /boot/System.map-2.6.10-1.770_14.rhfc3.at | grep capset
> c01229f8 T sys_capset
> c01bc692 t dummy_capset_check
> c01bc696 t dummy_capset_set
> c01c09cc t selinux_capset_check
> c01c09fc t selinux_capset_set
> 
> http://bugzilla.atrpms.net/show_bug.cgi?id=474
> 
> Let me know if more information is needed.
> 
> Phil
> 
> 
> 
> _______________________________________________
> atrpms-users mailing list
> atrpms-users at atrpms.net
> http://lists.atrpms.net/mailman/listinfo/atrpms-users

-- 
Axel.Thimm at ATrpms.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.atrpms.net/pipermail/atrpms-users/attachments/20050315/d0d4868f/attachment.bin