Hello, Well it's 2012 and it still uses CAP_NET_ADMIN, yoohoo, that's never gonna be fixed.
Here's some background from OpenVZ folks (which is, in turn _part_ of Debian now): http://forum.openvz.org/index.php?t=rview&goto=44205&th=791 and here's the shorter "fix": vzctl set $VEID --capability NET_ADMIN:on --setmode restart --save It's like changing all uid's to zero and be happy with it, but hey, it's the 21th century. ;-) Happy this year, grin -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]

