I've updated the case directory with a new man page (fping.1m).
Following is an updated proposal. Basic change is that all uses of
getuid/geteuid/seteuid have been compiled out and 'net_icmpaccess' is
now required, and that the target directory for the binary is /usr/sbin.
Thanks,
Dan
Proposal:
Integrate fping into Solaris
Details:
fping is a ping like program which uses the Internet Control Message
Protocol (ICMP) echo request to determine if a host is up. fping is
different from ping in that you can specify any number of hosts on
the command line, or specify a file containing the lists of hosts to
ping.
Unlike ping, fping is meant to be used in scripts and its output
is easy to parse.
Instead of trying one host until it timeouts or replies, fping
will send out a ping packet and move on to the next host in a round-
robin fashion. If a host replies, it is noted and removed from the
list of hosts to check. If a host does not respond within a certain
time limit and/or retry limit it will be considered unreachable.
Fping has been developed and maintained by Roland Schemers,
RL "Bob" Morgan, David Papp and Thomas Dzubin - webpage
http://fping.sourceforge.net.
The current version of fping is 2.4b2_to-ipv6 (01/16/2002).
Exported Interfaces:
SUNWfping Uncommitted Package name
/usr/bin/fping Committed Executable location
fping Uncommitted Commandline syntax
fping output Uncommitted
Doc Impact:
New man page: fping.1M (see case directory). This is an enhanced
version of the distribution's fping.8 with examples of the output
and removal of any setuid references.
Security Impact:
The original code base used a raw socket to communicate and
required root
access (geteuid() == 0). This has been modified to call
priv_ineffect(PRIV_NET_ICMPACCESS)
All uses of geteuid/getuid/seteuid have been compiled out.
References:
[1] http://fping.sourceforge.net/ - Home page
[2] 6636635 Integrate fping-2.4b2_to-ipv6 into Solaris
--
Dan Hain
Solaris Revenue Product Engineering (RPE)
http://namefinder/NameFinder?nfquery=-s+88796
--------------------------------------------------------------
NOTICE: This email message is for the sole use of the
intended recipient(s) and may contain confidential and
privileged information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are
not the intended recipient, please contact the sender
by reply email and destroy all copies of the original message.
--------------------------------------------------------------
