> > dalvikvm( 3865): cannot set capabilities (7c13c20,7c13c20): Operation not > permitted >
OK. I never heard of that before. After a few minutes with Google and grep we see: - the error is printed from dalvik_system_Zygote.cpp - on return from "setCapabilities" - on return from a "capset" Operating System API call => Looks like the permission settings of your user account does not allow using capset within lxc. You can try to find out if it is possible to grant (or simulate granting) of these required thread capabilities. Modifying dalvikvm should only be considered as a last resort. Now trying to customize dalivikvm/supporting permissions > This is likely not an issue with dalvikvm, but with lxc, your user account, and/or the Linux kernel. Now what are these capabilities? The Linux kernel man page for "capset" points to a header file "capabilities.h". The binary flag value requested is 0x07c13c20. But we need the bit position values. If I did not make a mistake, 0x07c13c20 means: Bits 5, 10, 11, 12, 13, 16, 22, 23, 24, 25, 26 are set, all other bits are cleared. Hm. If the "#defines" in capability.h directly map to the bit numbers (I did not check), then this would be (5 - CAP_KILL), (10 - CAP_NET_BIND_SERVICE), (11 - CAP_NET_BROADCAST), (12 - CAP_NET_ADMIN), (13 - CAP_NET_RAW), (16 - CAP_SYS_MODULE), (22 - CAP_SYS_BOOT), (23 - CAP_SYS_NICE), (24 - CAP_SYS_RESOURCE), (25 - CAP_SYS_TIME), (26 - CAP_SYS_TTY_CONFIG). All of these I would actually expect to be necessary for a "master control process" (like Zygote is in Android). Bit for a process in a user-mode "container"? Most of these will be denied. => Happy hacking lxc to support (i.e. mask / map / simulate) all of this. :-) -- -- unsubscribe: [email protected] website: http://groups.google.com/group/android-porting --- You received this message because you are subscribed to the Google Groups "android-porting" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
