> > "The program uses a raw socket to communicate and requires root
> > access
> > (geteuid() == 0)."
> >
> > Yet the man page states:
> >
> > "-f Read list of system from a file. This option can only be
> > used by
> > the root user. Regular users should pipe in the file via
> > stdin:
> > fping < targets_file"
> >
> > That implies that users other than root can run the command. Which is
> > accurate?
>
> The effective uid must be root to run the program. In addition, if the
> "-f" flag is specified, you really have to be root.
And why is that? What about fping requires not following the
Solaris policy of privilege? See PSARC/2002/188 Least Privilege
for Solaris.
Gary..
