> On Aug 18, 2015, at 7:15 AM, Lowell Gilbert > <freebsd-stable-lo...@be-well.ilk.org> wrote: > > Marko Cupać <marko.cu...@mimar.rs> writes: > >> I use web applicaton (net-mgmt/phpipam) which should have the ability >> to check hosts' availability via ping. I can even specify path to ping >> executable. >> >> This functionality does not work on FreeBSD by default, and suggested >> workaround is to set setuid bit on /sbin/ping. >> >> I don't like to modify permissions of base files. Is there an >> alternative solution? e.g. a port? > > In what way does ping(8) not work? A look at its error output should > tell you what the problem is. > > Additionally, the standard permissions on /sbin/ping *are* suid root. > It certainly won't work if you've changed that, so just change it back. > > And yes, there are other ping programs present, including some with > pretty graphical web page UIs. But there's no reason that PHP should > have trouble calling /sbin/ping.
It is a pretty standard issue: only apps running as root can send ICMP directly, as ping does. PHP runs in Apache, and to prevent security issues with privilege escalation setuid programs are forced to run as an unprivileged user. I would check to see how “fping” in Nagios solved this issue. Tom _______________________________________________ freebsd-stable@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-stable To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"
