I started off by asking:
> What I want to know is, why the heck is ping SUID-root?
On Mon, 24 Apr 2000, Cole Tuininga wrote:
> The generation of an icmp packet requires raw access to the eth device.
> This requires root priv's.
On Mon, 24 Apr 2000, Kevin D. Clark wrote:
> Sending and receiving raw ICMP requires a raw socket. Since it is unwise
> to allow the casual user this sort of low-level access to the network,
> opening a raw socket requires root privileges.
On Mon, 24 Apr 2000, Derek Martin wrote:
> I don't remember the exact details, but it has to do with socket
> permissions or something. Someone will no doubt know...
Well, I guess I got my question answered!
I'll follow that up by saying: Why the heck isn't there a safe interface to
ICMP, so ping doesn't have to be SUID root? :-)
--
Ben Scott <[EMAIL PROTECTED]>
| "...it is important to realize that any lock can be picked with a big |
| enough hammer...." -- Sun System & Network Admin manual |
**********************************************************
To unsubscribe from this list, send mail to
[EMAIL PROTECTED] with the following text in the
*body* (*not* the subject line) of the letter:
unsubscribe gnhlug
**********************************************************
