Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 45531 - named died with 'capset failed: Operation not permitted' with Linux-2.6.4
Summary: named died with 'capset failed: Operation not permitted' with Linux-2.6.4
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Core system (show other bugs)
Hardware: x86 Linux
: High major (vote)
Assignee: x86-kernel@gentoo.org (DEPRECATED)
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2004-03-23 12:35 UTC by Mark Elkins
Modified: 2004-05-06 00:03 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Mark Elkins 2004-03-23 12:35:51 UTC
After installing the new Kernel 2.6.4-rc1, named dies with a 'capset failed: Operation not permitted' error. This is on one of my primary Nameservers :-(
Even tried the bind code from ISC. Message is from ..
bind-9.2.3/bin/named/unix/os.c - 'function linux_setcaps'

Reproducible: Always
Steps to Reproduce:
1. Install Linux 2.6.4-rc1
2. Try and run 'named'
3.

Actual Results:  
# named -g
named: capset failed: Operation not permitted

Expected Results:  
named should have run ????

Can't figure why no one else has reported this. Copied the 2.6.4-r1 kernel over
to a Slackware 9.1 machine, and recompiled. Same thing happened. I think its a
change in 2.6.4 Linuix Capabilities, Threads or Securities around changing your
user ID or similar.
Comment 1 Martin Holzer (RETIRED) gentoo-dev 2004-03-24 09:47:35 UTC
did you try 2.6.5-rc2 ?
Comment 2 Martin Holzer (RETIRED) gentoo-dev 2004-03-24 23:27:29 UTC
to merge direct ebuilds, just

emerge /path/to/foo.ebuild

Comment 3 Richard Morris 2004-03-28 08:11:19 UTC
I had the same issues with versions of 2.6 kernel, I didn't report it as a bug here because it appeared to be a kernel thing rather than a gentoo bug.

I have just tried sys-kernel/mm-sources  2.6.5_rc2-r3, compiling it with genkernel and named now starts without errors.

 
Comment 4 Mark Elkins 2004-03-29 00:05:22 UTC
Agreed - Seems to be more to do with the Kernel being used - and possibly
how its compiled. Running 2.6.5-rc2 gives no problem. If 'named' ever has a 'capset' (an error in requesting certain capabilities from the Kernel - ie setting some sort of ulimit or user id) then try a different Kernel or Release Canidate.
Comment 5 grassi 2004-05-06 00:03:30 UTC
I edited "/usr/portage/net-dns/bind/bind-9.2.2-r3.ebuild" and added one line in the econf section:
 --disable-linux-caps \

This is the critical configure-parameter resposible for the bug. 
When I re-emerged bind, it finally started.
I have kernel 2.6.5-r1 (or r2).