From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail.openvz.org (unknown [69.168.225.77]) by lore.virtuozzo.com (Postfix) with ESMTPS id 1A77A8017D for ; Wed, 21 Oct 2026 20:57:49 +0000 (UTC) Received: from mail.openvz.org (localhost [127.0.0.1]) by mail.openvz.org (8.14.4/8.14.4) with ESMTP id 69LKuSR8026542; Wed, 21 Oct 2026 23:56:29 +0300 DKIM-Filter: OpenDKIM Filter v2.11.0 mail.openvz.org 69LKuSR8026542 Authentication-Results: mail.openvz.org; dkim=fail reason="signature verification failed" (2048-bit key) header.d=virtuozzo.com header.i=@virtuozzo.com header.b="Ep0qPJsu" Received: from mail-yw1-f200.google.com (mail-yw1-f200.google.com [209.85.128.200]) by mail.openvz.org (8.14.4/8.14.4) with ESMTP id 69LKuPjt026538 (version=TLSv1/SSLv3 cipher=AES128-GCM-SHA256 bits=128 verify=FAIL) for ; Wed, 21 Oct 2026 23:56:25 +0300 DKIM-Filter: OpenDKIM Filter v2.11.0 mail.openvz.org 69LKuPjt026538 Received: by mail-yw1-f200.google.com with SMTP id 00721157ae682-88322409239so20460787b3.1 for ; Wed, 21 Oct 2026 13:56:25 -0700 (PDT) X-Gm-Message-State: AFq9FYKKAJu7fgYZqndYgH0fJxfSrlX0UyJpCx5WRq/iRPO90fOFYTmc 5u3aXCTY7PWg9FPl3gLlf0dLrfysyyh+S0X1/7YkMVSlxSBfiJtqqCBmQav9PMjbDJ1p51PqY+8 bKQYhRw72XYhRGpAyrb7625Lo6lCp7PeRtE59cJQTRlyk6LbdT8e2zw== X-Gm-Gg: AYBFou2BNsUIpeiA02JyuGi5fIvtweYVtHEVXqvvxQjd+1TJSsXtcSezS/+ZhBzaQEf vGm/4zst7aqCXTnbnVgqmbGlhFA/UHc4mzhHHOopQwod3xdjQ9BHPb1bpJ5PT3T1Dn2aa17t11Y iZQIVECejfaoVfcUOSVqahiFXL8pAG3RTrbCHAJBPg3ixBreTE/E5n6itl8ibYAHSZCVTPUb/H5 mSO0gChKb6Qveuby0SNCWtlVl0mBJJ0cBumBeOO73vc19/mCG2e+9pcz+c1RBMqnkAbTCgDARfr MFyIOen9UGI0Cpzbcy38Yn149U3wjTdkHJ1PMI9YdTe4zfEoCZMrxy2bbroGryz0QyrVyo0Nj0+ pCzfD35//UQLNDLMu8ImSQQqJxIN5gMblSZ+3upQPAMsPOyl+8+Xf/m9Vh5gaiidhMAluOl9OMP DWZoglYxy+4D6pb1gzLUENnSupxkTJdGHzkg== X-Received: by 2002:a05:690c:e3cc:b0:8b1:2b32:de70 with SMTP id 00721157ae682-8b133d7411emr21963407b3.35.1792616184584; Wed, 21 Oct 2026 13:56:24 -0700 (PDT) X-Received: by 2002:a05:690c:e3cc:b0:8b1:2b32:de70 with SMTP id 00721157ae682-8b133d7411emr21963237b3.35.1792616183962; Wed, 21 Oct 2026 13:56:23 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1792616183; cv=pass; d=google.com; s=arc-20260327; b=PJf83LYYC1ttuQrpjSYTh1IN4m6DUg19RVG8yuGqTBEDXAAUwJjSSxO48qO4DTtTIw SUQLYB9XHTRoU6n5CrmDdgqPvoxjC6/jb/9dCuMu7UpwwKgKTNLTvOiQOVKtButKKB/F OBKEU4Ibi6l/ewulkONKqb5H9ip7I2cMt7tn5NTpbnN0qZYzdi2lWu3G6Vtc7S/SYbEm YbVu85HJttFMPqcHxY1+QIhAu6YFBC0O6DKh37DMg5B0U67iglgcoyys90NwR6kMBJu1 9siP6GG2btU82gLoxvft3xaMhqGw6mErGWfPyAXZoDZ28vSlEx+jcaiBSku39GjF4y2u IYog== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=mime-version:content-transfer-encoding:in-reply-to:from :content-language:references:cc:to:subject:user-agent:date :message-id:dkim-signature; bh=B4UpgMgsfJSUjKQNo5oHpRWUQKUvvg8wsubKwt4g4Ns=; fh=9yWdjuu2uN8qE03q8fFPktcHQs1ULRxAiPuX/sT7Hho=; b=SUK/3ncjCsjhplHTSpQUFV2ZDlySgyE6qoiuncw5mPp60O/XTb+ivYaQY/ZkVx79Ia hB5WjcEuy7QC3KUVcg0iSH8tud6yNDQn7QL07IMQO4Howr/g+U1fOvHIAhZ/RBslNzp/ uTy1k2lGJcto7e5zK7gmV5+c0ZttRg5CDdCSPzRyM6Ex0W+eceDKMClXP0WLW4qtq1jb kvkR7x79FQ6IgmTbZtqTUcF8yRhCu1KcH07gklQv+ANo28c/dbi07rCRT3Ei7aQJPBay XapYMgtEmcuqKEOnW9dYh2VV9Omn1nIslcMD7FPFkWBQ80Jx2kuFLNF5Pu1yMHEVNEDb CG9A==; dara=google.com ARC-Authentication-Results: i=2; mx.google.com; dkim=pass header.i=@virtuozzo.com header.s=selector2 header.b=Ep0qPJsu; arc=pass (i=1 spf=pass spfdomain=virtuozzo.com dkim=pass dkdomain=virtuozzo.com dmarc=pass fromdomain=virtuozzo.com); spf=pass (google.com: domain of vladimir.riabchun@virtuozzo.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=vladimir.riabchun@virtuozzo.com; dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=virtuozzo.com Received: from MRWPR03CU001.outbound.protection.outlook.com (mail-francesouthazlp170110003.outbound.protection.outlook.com. [2a01:111:f403:c207::3]) by mx.google.com with ESMTPS id 00721157ae682-8b13027e55fsi17747027b3.29.2026.10.21.13.56.23 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 21 Oct 2026 13:56:23 -0700 (PDT) Received-SPF: pass (google.com: domain of vladimir.riabchun@virtuozzo.com designates 2a01:111:f403:c207::3 as permitted sender) client-ip=2a01:111:f403:c207::3; Authentication-Results: mx.google.com; dkim=pass header.i=@virtuozzo.com header.s=selector2 header.b=Ep0qPJsu; arc=pass (i=1 spf=pass spfdomain=virtuozzo.com dkim=pass dkdomain=virtuozzo.com dmarc=pass fromdomain=virtuozzo.com); spf=pass (google.com: domain of vladimir.riabchun@virtuozzo.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=vladimir.riabchun@virtuozzo.com; dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=virtuozzo.com ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=ROMyfHda59yraxuH8EMOEZ3gFFmXgBz1h1qqhcnE3YhTl+LuK+1YX8AkaA2tH3IdTWsoTrQApDc0TrHMjnsC5zljooQ8tAUF5qTtF0tZWGlJApIaoo76RO3wOxeEzu6oG9ssgtLiFISqkVwvsKaH2NVq6HRbp4Y5YB7chtrvV8CrCfCZ0JzgtUjvA1xdb5Ir7mrY3aMNouL8GBbPaoHQyAHa/wk1VmOWbS/FKK2ZzKuSO4/O6k+JF3OhmZpb6OTRjrjxUpHUv8szJ1HnFmmDaxZV522baCqNp/4lzO3N+aZk6d0HrYC6iqTguLmSHZ1yrMtMseegwIxpqbuYLKXwdw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=B4UpgMgsfJSUjKQNo5oHpRWUQKUvvg8wsubKwt4g4Ns=; b=dW8kZkQrQF4f2nrclfAEnIbaYDIJgB7N0pPOM7lUIiNioabOVYmfq0spBBoLH7Q3mEA/lrsdMqx4MhjF53foBDMTue/YvLCw2FXq0MlpmF7QeGmL9lm3JGvZE5KVN1XqfHoLAblVQBvu7VU7MlJtcMWGU7n6aEbJH3TY0mDMGOViXVMA+TXhEIJQnbzHWe+pEYZwIIkIi2TzK7FogJ/lDzAd7b6JfAm3VfKNfRnUoYBMWUI8i54Lvarg7mNljSNHXlcJGQDzYXWSVWd9v6AQ56fR8fv8iICdGykaFYD9O24l+hdqSHQfHM7RgfchuHIsjWhpJJ+Kl1oAFggEJ8E4pg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=virtuozzo.com; dmarc=pass action=none header.from=virtuozzo.com; dkim=pass header.d=virtuozzo.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=virtuozzo.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=B4UpgMgsfJSUjKQNo5oHpRWUQKUvvg8wsubKwt4g4Ns=; b=Ep0qPJsutCqx16UezYo2kRoHFeV03pq6qUhfDI2aEMhqkFIC1xx3yjrRGnoxYttO9+dZz0FX+wucVg8HU6BfOXpq6ZB1X6/4yqXU6A2S7I+FIE2O/WIYlfmktF+k+0XIDrqCqGaCguUMBM1SEGWSWNhP13xcYYDTXsEsYV0HxOWuADvmp5cZgwGUa6iZCEwgNE2dwtXcuebPK3WFFtHwAiQgVGhG5vWVgdQbTF7a9ixFSb4j9aMfKCTa+qIDtQWswU0PPLHAcVPjcwChMsPGadcZGU7wSL6dLL6SvBrFGSi24/pOPv31L0v82KsKKm1SM5JpbS824r8jMb/l1xd25w== Authentication-Results: mx.microsoft.com 1; dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=virtuozzo.com; Received: from MI7PR08MB201474.eurprd08.prod.outlook.com (2603:10a6:290:112::17) by AM6PPFAF1314C73.eurprd08.prod.outlook.com (2603:10a6:20f:fff1::b13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.546.15; Wed, 21 Oct 2026 20:56:22 +0000 Received: from MI7PR08MB201474.eurprd08.prod.outlook.com ([fe80::f35b:af88:bd82:6dfa]) by MI7PR08MB201474.eurprd08.prod.outlook.com ([fe80::f35b:af88:bd82:6dfa%3]) with mapi id 15.21.0546.012; Wed, 21 Oct 2026 20:56:21 +0000 Message-ID: <29f80a7d-9855-454e-98d3-b7b622433844@virtuozzo.com> Date: Wed, 21 Oct 2026 22:56:20 +0200 User-Agent: Mozilla Thunderbird To: Eva Kurchatova , khorenko@virtuozzo.com References: <20261021175410.2339797-1-eva.kurchatova@virtuozzo.com> Content-Language: en-US From: Vladimir Riabchun In-Reply-To: <20261021175410.2339797-1-eva.kurchatova@virtuozzo.com> X-ClientProxiedBy: ZR2P278CA0057.CHEP278.PROD.OUTLOOK.COM (2603:10a6:910:53::14) To MI7PR08MB201474.eurprd08.prod.outlook.com (2603:10a6:290:112::17) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: MI7PR08MB201474:EE_|AM6PPFAF1314C73:EE_ X-MS-Office365-Filtering-Correlation-Id: 1ac00785-73e9-4eca-a29d-08df2fb5c316 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; ARA:13230040|1800799024|376014|366016|23010399003|261021123027099003|56012099006|5023799004|18002099003|10067099003|22082099003|261021121427099003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:MI7PR08MB201474.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230040)(1800799024)(376014)(366016)(23010399003)(261021123027099003)(56012099006)(5023799004)(18002099003)(10067099003)(22082099003)(261021121427099003); DIR:OUT; SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?B?cmdqdjVKcWNJeWFXMng4U0xvSFgvZ202QWw5dFZhamZpWWJ5QlU5T0RKOUlF?= =?utf-8?B?SFlCSWJFRFV0UlNRWEM2Z2hDbGxTTHMrVThaQkpWYkxLanBKdXdrTm93cVM1?= =?utf-8?B?REpsUkZ3eHdDZHlXSWV0RERlVWhubW1pT0R1RVQwM3UzK0hBZmVIdHB5WHRE?= =?utf-8?B?aFJ0aU9GcEkxeFZOaHhDck1TNFh4d3JDRFppZlAvSkhJZWwvSG9MQmdla1lm?= =?utf-8?B?Y25JQTFLUzNYV0k2UUNJZE9wTENFYzByMVloUWtNMUVlanpaZVVyRU1PdU5X?= =?utf-8?B?NjVyL3owbnR1Z09XanUxNk9UVXRTWk43eU91UDV5RVhueWd3VTFiZ2w5Ui9i?= =?utf-8?B?a2dKVFQ0NkZnZ3cxY08vRlpXa0JGWGZXZStqT3JCbzlwZHN1Qzc4MXJWMDFC?= =?utf-8?B?VVhlZHVGbDdRazB6dEFwUVM4U01MTVhUSHhtWFlBODhkUjR3SmFWazEweHJp?= =?utf-8?B?TU5qVm5JUWl6WjhRNzFFeEhBV05INEY4MjJiY0NvZ21EbTRMejN5ZVRKRnVF?= =?utf-8?B?STJSNm1iU3A5MEpBdXVXaWw5d1UyQ3FaTmFOZEJJMGg4OUplTmlIODBiZEpE?= =?utf-8?B?NVZzM2x6QnFlYXRXb2xUQjVvZzlUUlI2ZnFiTkdCZDA5RCtqN09SU0ZWYXV6?= =?utf-8?B?QklKVFVPNEtDUnhteFoxWkxFc1R2cnZZT00rUXJqNUdFZEtCWHp0ZW1lZ1Zv?= =?utf-8?B?WVlKSllnbm03TmVudnNkTjArYWJoNlZwZlVHMXpIcWQrOUdpYzVWaFhhTElS?= =?utf-8?B?NUNFNHkzUXNXMUV3eFU2NUVtZkhPYkI5dmZFc3dzcEl3Q25MWVlBZVJveG1W?= =?utf-8?B?b2daUGtOZmg1RXQ4Y0o3bjR6TE9YMEJDWHZuQVpYZm5iVjA3bndlYWo5dlp6?= =?utf-8?B?MWxjdU5kT2UvRVNzaW04bmhCS0FJdHZWTUNkSEd3aDYxNlhWckMzM3FWeXVt?= =?utf-8?B?eDN4RWtZclRHK0U3VGFlbnZ1Q2kwZUNNZ1JYajFBRjZQNnVwVnVuNkMyTDNr?= =?utf-8?B?NndlQktueFpvekFkZ1BacERFRTgwVzVEcWlNbEZWQmJSajlvOEo5OVBubFRM?= =?utf-8?B?N0l0Mm1qWjBiTkFLVzlQYi9kYkcxUE5nbm9kM1pTVlU3U2N0UkFuMTI2b0hM?= =?utf-8?B?S2NwcC80L3ZBc2pVUVVwMEdaMmVUL0pnQkMzV0VITnBxbFVDbm1nbm5WRmt4?= =?utf-8?B?UVF6dzlqbWhzdHp6d2hYbk5UblFkSUZnMVN6RUlxaTZKUVdta2s1ZjN6Tms2?= =?utf-8?B?QjJXTHlpOGdZaE5qNFlROTV2bmNSRHgzL0pVNU1ncnZLTERKbE5UMGRQcHcz?= =?utf-8?B?Y3JVQlR3c2ZjS0QwKzFVQmwrdzVQQnU1Ty8zeUp3NDZBSjM0RDJWQ1o4ZDdV?= =?utf-8?B?TVVEZnErQzcyb2cvVGFmcFp5aGpoT0tzZlhLWlVqM3J4VDVGVFh4ME9EWHY3?= =?utf-8?B?Y3gwRVRvWjNBWGYxbGl6OXljeDk3RURCOGRRTVFCdXE4MmRmdi9maE8vUDhi?= =?utf-8?B?TC8wa0E5KzNFaGMrUUx6SzhRMDlMUEhEcVhBM3kzeU9mdW5tT3VNUm80aWNi?= =?utf-8?B?RTgzQnhBV21MTnU5a1Fod3dvZkVlazB0NnlVZFRtTndLZUFjRGpqU1pBTDVq?= =?utf-8?B?dU0vV3Vlc204emp1QzBQTlJlUzBiNXAxcVlRdzBaTnNreGd1YmFrWHNTLzRk?= =?utf-8?B?eENkOXM4WmpoR1kwQXdEeFEzRU10eEttYjBCUEhHZVJRWXVKVldnWllkdndI?= =?utf-8?B?Z2J3a2M4SmZxNXREQitVNW54QitSU3ZqZUJ6dFdFUmlIQWZVZUtPOEFyU1Zl?= =?utf-8?B?bWcvNXFEaWFkY256aDRjeVpnT1h1emFGVHFMNkkvQy9Ta2RvZ1llVEZzRXVV?= =?utf-8?B?ZXBXaDMzTTJaS3c4WHNuU2Fibk9ZRThBU3JIL1FJOUlMRklXTXUrZXNrb3NE?= =?utf-8?B?Yzh0Y2xOWEd4OTN3ekVMVXhqRFNYWHB0Qmt4cVd5Zm84ZlVuK1lUTlloSGxm?= =?utf-8?B?Y2YxbDFWM0RUQ1BCUEVNTEUxNjk1WEJPdW1NR3Fqcm9WYzdMb3YrenVUZmI2?= =?utf-8?B?enBiTEdUaVBPSWJndGVMRnlpcmVFS3dPUUJ2eElraGUwSXoySnFFZHI0MUNw?= =?utf-8?B?blIwV3oydHQ3VEo2RktNQlUwK20veC9DZ3FpQjdneWRoNGtMakZMTDhYVUxB?= =?utf-8?B?ZXdvVkRMWjRSdnI4RjJBYVVabTE5a3VCaThnMUtYQmtTaDBIUXl2MEptZ1pT?= =?utf-8?B?T1haUXdxSkdOMzlCMENOeDVTdytkK1ZYVE9MNnRRU00zSXo5KzNQcHdHbHFu?= =?utf-8?B?NXZqWGZFdFMxYlhNNXY2N1ZNQ3Nid0dqREhNYUpKVXNBL1UxVUN5MmZ3aFdv?= =?utf-8?Q?9pROLcQBu5ZS8MyM=3D?= X-OriginatorOrg: virtuozzo.com X-MS-Exchange-CrossTenant-Network-Message-Id: 1ac00785-73e9-4eca-a29d-08df2fb5c316 X-MS-Exchange-CrossTenant-AuthSource: MI7PR08MB201474.eurprd08.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 21 Oct 2026 20:56:21.9223 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 0bc7f26d-0264-416e-a6fc-8352af79c58f X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: viUIp+EIai8r96ePLBNZIX/3N4RG5B8DlDBwhhDyZPT42gViwflQWLE/OBSxzvBf20T2yfCkIHQxXV0esWo62tLgFt2Nj74L9pZSzee+b8Q= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM6PPFAF1314C73 X-OZ-Fwd: true Cc: devel@openvz.org Subject: Re: [Devel] [PATCH hci-8.1] block: let container root set the block size of and flush its device X-BeenThere: devel@openvz.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: OpenVZ development List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Sender: devel-bounces@openvz.org Errors-To: devel-bounces@openvz.org On 10/21/26 19:54, Eva Kurchatova wrote: > BLKBSZSET and BLKFLSBUF check CAP_SYS_ADMIN in the initial user > namespace, so root in a container cannot set the block size of a block > device it has been given, nor flush its buffers, and mkfs.xfs on a loop > device there stops with "cannot set blocksize 512 on block device > /dev/loopN: Permission denied", or with "Flushing the data device > failed, err=13" once it gets past the first. > > Check the capability relative to the container, as the other block > code adapted for containers does. The device itself is reachable only > through the device cgroup, set_blocksize() still needs the device > exclusively, and a flush discards only cached pages of that device, so > nothing a container could not already write to is affected. > > https://virtuozzo.atlassian.net/browse/VSTOR-137668 > Feature: ve: allow various syscalls in CT root userns > > Signed-off-by: Eva Kurchatova > --- > block/ioctl.c | 4 ++-- > 1 file changed, 2 insertions(+), 2 deletions(-) > > diff --git a/block/ioctl.c b/block/ioctl.c > index a3c53b04e1e3..14047cd8e611 100644 > --- a/block/ioctl.c > +++ b/block/ioctl.c > @@ -419,7 +419,7 @@ static int blkdev_pr_clear(struct block_device *bdev, blk_mode_t mode, > static int blkdev_flushbuf(struct block_device *bdev, unsigned cmd, > unsigned long arg) > { > - if (!capable(CAP_SYS_ADMIN)) > + if (!ve_capable(CAP_SYS_ADMIN)) Is it possible that some evil CT user can spam flush, keep mutex most of the time and prevent some host actions? I'm mostly talking about ploop devices passed by vzctl. > return -EACCES; > > mutex_lock(&bdev->bd_holder_lock); > @@ -531,7 +531,7 @@ static int blkdev_bszset(struct file *file, blk_mode_t mode, > struct file *excl_file; > int ret, n; > > - if (!capable(CAP_SYS_ADMIN)) > + if (!ve_capable(CAP_SYS_ADMIN)) The same question regarding hdd disks from vzctl: can't we break them? > return -EACCES; > if (!argp) > return -EINVAL; I'll check tomorrow what nasty thing could be done with them. -- Best regards, Riabchun Vladimir Linux Kernel Developer, Virtuozzo _______________________________________________ Devel mailing list Devel@openvz.org https://lists.openvz.org/mailman/listinfo/devel