local: set capability correctly

Now we give uninitialized data[1] into capset().

Signed-off-by: Andrey Vagin <avagin@openvz.org>
cgroups: move a process into required cgroups

Currently we fork a process and it moves itself into cgroups.

* A process can have not enought permisions to do this.
* Currently cgroups_attach() is called after setting namespaces,
  but cgroups can be not mounted in CT.

Reported-by: Monali Porob <Monali.Porob@huawei.com>
Signed-off-by: Andrey Vagin <avagin@openvz.org>
test: fix url to a minimal root

Signed-off-by: Andrey Vagin <avagin@openvz.org>
tests: call test_init() from tests

Signed-off-by: Andrey Vagin <avagin@openvz.org>
ct: use one seqpacket socket instead of two pipes

Signed-off-by: Andrey Vagin <avagin@openvz.org>
ct: don't return zero on error paths

Signed-off-by: Andrew Vagin <avagin@openvz.org>
vz: use one unix socket instead of two pipes for synchronization

Signed-off-by: Andrey Vagin <avagin@openvz.org>
util: remove unused functions

Signed-off-by: Andrey Vagin <avagin@openvz.org>
Merge pull request #34 from avagin/xemul

fix bugs and clean up code