glauber has set the approveacls acl on vzctl (Fedora 19) to Approved for avagin To make changes to this package see: https://admin.fedoraproject.org/pkgdb/acls/name/vzctl