Must run as root.