Run dnsmasq as root on OpenVZ container