https://qa.mandrakesoft.com/show_bug.cgi?id=760
------- Additional Comments From [EMAIL PROTECTED] 2003-01-24 14:43 -------
Hummm I spoke too fast, the bug is still here !
Please use LC_ALL=C to set posix lang, not LANG=C.
Look at the following examples and notice 'inet adr' or 'inet addr' :
# ifconfig lo
lo Lien encap:Boucle locale
inet adr:127.0.0.1 Masque:255.0.0.0
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:328 errors:0 dropped:0 overruns:0 frame:0
TX packets:328 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 lg file transmission:0
RX bytes:23126 (22.5 Kb) TX bytes:23126 (22.5 Kb)
# LC_ALL=fr_FR ifconfig lo
lo Lien encap:Boucle locale
inet adr:127.0.0.1 Masque:255.0.0.0
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:328 errors:0 dropped:0 overruns:0 frame:0
TX packets:328 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 lg file transmission:0
RX bytes:23126 (22.5 Kb) TX bytes:23126 (22.5 Kb)
# LC_ALL=C ifconfig lo
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:328 errors:0 dropped:0 overruns:0 frame:0
TX packets:328 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:23126 (22.5 Kb) TX bytes:23126 (22.5 Kb)
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.
------- Reminder: -------
assigned_to: [EMAIL PROTECTED]
description:
If you use run guarddog under a language environment that is not C or english
the parsing of the ifconfig command fails to recognize your network interfaces
addresses and so the resulting iptables rules are incorrect.
In english ifconfig shows for example :
eth0 Link encap:Ethernet HWaddr 00:01:02:0C:20:8A
inet addr:10.0.0.10 Bcast:10.0.0.255 Mask:255.255.255.0
In french the same is :
eth0 Lien encap:Ethernet HWaddr 00:01:02:0C:20:8A
inet adr:10.0.0.10 Bcast:10.0.0.255 Masque:255.255.255.0
Notice 'adr:' in english versus 'addr:' in french.
It seems that guarddog incorrectly parse this line using en english pattern.
temporary workaround, run: LANGUAGE=C guarddog
but the parsing should not depend on the language environnment used.
This is a SECURITY ISSUE.
