diff -NurpP --minimal linux-2.6.11.7-vs2.0-pre2/include/linux/vserver/context.h linux-2.6.11.7-vs2.0-pre2-syslog_cap/include/linux/vserver/context.h --- linux-2.6.11.7-vs2.0-pre2/include/linux/vserver/context.h 2005-04-23 02:25:23.000000000 +0200 +++ linux-2.6.11.7-vs2.0-pre2-syslog_cap/include/linux/vserver/context.h 2005-04-29 18:35:35.000000000 +0200 @@ -52,6 +52,7 @@ #define VXC_SET_RLIMIT 0x00000002 #define VXC_RAW_ICMP 0x00000100 +#define VXC_SYSLOG 0x00001000 #define VXC_SECURE_MOUNT 0x00010000 #define VXC_SECURE_REMOUNT 0x00020000 diff -NurpP --minimal linux-2.6.11.7-vs2.0-pre2/security/commoncap.c linux-2.6.11.7-vs2.0-pre2-syslog_cap/security/commoncap.c --- linux-2.6.11.7-vs2.0-pre2/security/commoncap.c 2005-04-23 02:25:24.000000000 +0200 +++ linux-2.6.11.7-vs2.0-pre2-syslog_cap/security/commoncap.c 2005-04-29 18:41:52.000000000 +0200 @@ -311,7 +311,8 @@ void cap_task_reparent_to_init (struct t int cap_syslog (int type) { - if ((type != 3 && type != 10) && !capable(CAP_SYS_ADMIN)) + if ((type != 3 && type != 10) && !capable(CAP_SYS_ADMIN) && + !vx_ccaps(VXC_SYSLOG)) return -EPERM; return 0; }