[Cooker] kppp and suid

2003-08-16 Thread Olivier Blin
Hi kppp has root suid, is it really necessary ? pppd has already root suid, shouldn't it be be enough ? -- Olivier Blin

Re: [Cooker] kppp and suid

2003-08-16 Thread Diego Iastrubni
, 16 2003, 20:13, Olivier Blin : Hi kppp has root suid, is it really necessary ? pppd has already root suid, shouldn't it be be enough ? no, since kppp needs to write into /etc/ppp/* -- - diego _ / Never lie down with a woman who's got \ | more

Re: [Cooker] kppp and suid

2003-08-16 Thread Michael Scherer
On Saturday 16 August 2003 19:51, Diego Iastrubni wrote: Hi kppp has root suid, is it really necessary ? pppd has already root suid, shouldn't it be be enough ? no, since kppp needs to write into /etc/ppp/* what about using a group for this ? /etc/ppp/ could be group writeable, and kppp

Re: [Cooker] kppp and suid

2003-08-16 Thread Steffen Barszus
Am Samstag, 16. August 2003 19:13 schrieb Olivier Blin: Hi kppp has root suid, is it really necessary ? pppd has already root suid, shouldn't it be be enough ? pppd setuid root = pppd has access to all files it needs as well as devices and is able to set the route kppp setuid root = using

Re: [Cooker] kppp and suid

2003-08-16 Thread Diego Iastrubni
, 16 2003, 21:25, Steffen Barszus : Am Samstag, 16. August 2003 19:13 schrieb Olivier Blin: Hi kppp has root suid, is it really necessary ? pppd has already root suid, shouldn't it be be enough ? pppd setuid root = pppd has access to all files it needs as well as devices and is able

Re: [Cooker] kppp and suid

2003-08-16 Thread Steffen Barszus
Am Samstag, 16. August 2003 21:20 schrieb Diego Iastrubni: , 16 2003, 21:25, Steffen Barszus : Am Samstag, 16. August 2003 19:13 schrieb Olivier Blin: Hi kppp has root suid, is it really necessary ? pppd has already root suid, shouldn't it be be enough ? pppd setuid root = pppd

Re: [Cooker] kppp and suid

2003-08-16 Thread Olivier Blin
kppp has root suid, is it really necessary ? pppd has already root suid, shouldn't it be be enough ? no, since kppp needs to write into /etc/ppp/* Does it really need to write there ? No way to use ~/.ppprc only ? I've noticed that all dialers use /var/lock/LCK..ttyS? files. So they must

Re: [Cooker] kppp and suid

2003-08-16 Thread Steffen Barszus
Am Samstag, 16. August 2003 22:37 schrieb Olivier Blin: kppp has root suid, is it really necessary ? pppd has already root suid, shouldn't it be be enough ? no, since kppp needs to write into /etc/ppp/* Does it really need to write there ? No way to use ~/.ppprc only ? I've noticed

Re: [Cooker] kppp and suid

2003-08-16 Thread Olivier Blin
pppd running as root != pppd running by root yes The only way to dial up for user is to use peer scripts and having pppd setuid root. This way pppd can be started by user, since pppd call name is not a priviliged option. :) It seems that pppd can't be run as non-root user. I've tried and

Re: [Cooker] kppp and suid

2003-08-16 Thread Olivier Blin
It seems that pppd can't be run as non-root user. I've tried and pppd writes the following to syslog: /usr/sbin/pppd: must be root to run /usr/sbin/pppd, since it is not setuid-root Errm, perhaps I was wrong, I tried to set device on pppd command line ... But a strace on pppd gave this :