from Dave Anselmi:

" Is your script a "connect to the 'net" script?  You might describe

It en/dis/ables lan and dialup on my old 486 firewall box.  Diald 
handles the dialup connection well enough tho not perfectly.  I'm 
moving some hard drives and maybe other hardware around tho so I 
don't want to do too much until the hardware setup is pretty well 
stable (does this ever happen?<g>).

" what it does a little more - maybe your problem is already solved by
" someone more experienced than me (ppp dial-up for example).

There's really only three lines of any significance.   They resemble 
(from memory):

ifconfig eth0 up/down
ifconfig eth1 up/down
echo "up/down/quit" > /etc/diald/diald.ctl

The ifconfig lines wouldn't run except as root, why I don't know, and 
I didn't want to take the time to find out because of the hardware 
swaps coming up.  And, it seems, scripts are not supposed to be able 
to run suid root.  I know all of this would be dead simple if I had 
some real knowledge of linux, but I don't, so I have to just muddle 
along and learn as I go.  Anyway, it's working well enough now, at
least for the moment.

" I don't recall a no password option to sudo, though there might be

The sudo docs make mention of 'no password' config options or some 
such.  I haven't dug into it far enough to know for sure if it'll do 
what I wanted, tho.  

" one.  But of course you have to lock down what it can do in that case

yup.

" (e.g. don't give permission to run a script to someone who can edit
" the script).

There's a discussion of some of the (many) security issues on the web 
site.  I wouldn't want to get too casual about any of them but a 
quick first glance suggests most wouldn't be applicable in my 
situation.

R
_______________________________________________
Linux-users mailing list
Archives, Digests, etc at http://linux.nf/mailman/listinfo/linux-users

Reply via email to