On Tue, 11 Jun 2002, Antony Stone wrote: > > Well, on my system at least (Slackware 8.0), /proc/net/arp has permissions > -r--r--r-- so anyone can read it. The arp program is in /sbin, so it can > only be run by root. >
Are you saying that Slack secures /sbin against access by non-root users or the files there from being executed by non-root users? Not so on RedHat: [teastep@wookie Shorewall]$ /sbin/arp -na ? (192.168.1.5) at 00:A0:CC:DB:31:C4 [ether] on eth0 ? (192.168.1.254) at 02:00:08:E3:4C:48 [ether] on eth0 [teastep@wookie Shorewall]$ Note that /sbin isn't in non-root's PATH so by default an absolute path name must be used. But: [teastep@wookie Shorewall]$ PATH=$PATH:/sbin [teastep@wookie Shorewall]$ arp -na ? (192.168.1.5) at 00:A0:CC:DB:31:C4 [ether] on eth0 ? (192.168.1.254) at 02:00:08:E3:4C:48 [ether] on eth0 [teastep@wookie Shorewall]$ -Tom -- Tom Eastep \ Shorewall - iptables made easy AIM: tmeastep \ http://www.shorewall.net ICQ: #60745924 \ [EMAIL PROTECTED]
