udev: chown of /dev/ppp

2010-07-18 Thread Hans-J. Ullrich
Hia Marco andf Russell, tahnk you very much for your help. Well, I checked out and changed all permissions as it should be. The environment is now as follows: 1. /usr/sbin/pppd is now set 0475 with owner root:dip -rwsr-xr-- 1 root dip 269156 28. Nov 2008 /usr/sbin/pppd 2. The normal user

Re: udev: chown of /dev/ppp

2010-07-18 Thread Russell Coker
On Sun, 18 Jul 2010, Hans-J. Ullrich hans.ullr...@loop.de wrote: /usr/sbin/pppd: using the noauth option requires root privileges This message was the reason for my very first report. What did I miss? Is there something else I should check? The man page gives some information on this. If

udev: chown of /dev/ppp

2010-07-17 Thread Hans-J. Ullrich
Hello debian-team, I checked, that /dev/ppp is set to 600 with owner root:root. IMO this is not a good idea. IMOI this might be cause a security hole, because applications, which are using /dev/ppp also must be run as root. I think, for a normal and unexperienbced user it is no good idea, to

Re: udev: chown of /dev/ppp

2010-07-17 Thread Marco d'Itri
On Jul 17, Hans-J. Ullrich hans.ullr...@loop.de wrote: applications, which are using /dev/ppp also must be run as root. I think, for We have group dip to manage access to programs which can start network connections. Normal users, which are allowed to dial out, should be added to group

Re: udev: chown of /dev/ppp

2010-07-17 Thread Petter Reinholdtsen
[Marco d'Itri] We have group dip to manage access to programs which can start network connections. How does this interact with policykit? I was told that policykit uses ACLs to grant device access to those that should have it, but have not verified that it is true. Mentioning it here to see

Re: udev: chown of /dev/ppp

2010-07-17 Thread Hans-J. Ullrich
Am Samstag, 17. Juli 2010 schrieb Marco d'Itri: On Jul 17, Hans-J. Ullrich hans.ullr...@loop.de wrote: applications, which are using /dev/ppp also must be run as root. I think, for We have group dip to manage access to programs which can start network connections. Sorry. if I am wrong,

Re: udev: chown of /dev/ppp

2010-07-17 Thread Osamu Aoki
On Sat, Jul 17, 2010 at 09:45:52PM +0200, Hans-J. Ullrich wrote: Normal users, which are allowed to dial out, should be added to group dialout by root. Device /dev/ppp should be set to 660, and owner root:dialout. You should read: /usr/share/doc/base-passwd/users-and-groups.html dialout

Re: udev: chown of /dev/ppp

2010-07-17 Thread Russell Coker
On Sun, 18 Jul 2010, Hans-J. Ullrich hans.ullr...@loop.de wrote: Sorry. if I am wrong, I am not very well experienced with the required access rights. The background of my report is, that I tried to start the application umtsmon (a dialout application for 3g-modems) as a normal user, and I

Re: udev: chown of /dev/ppp

2010-07-17 Thread Marco d'Itri
On Jul 17, Petter Reinholdtsen p...@hungry.com wrote: [Marco d'Itri] We have group dip to manage access to programs which can start network connections. How does this interact with policykit? I was told that policykit uses It does not. ACLs to grant device access to those that should

Re: udev: chown of /dev/ppp

2010-07-17 Thread Marco d'Itri
On Jul 17, Hans-J. Ullrich hans.ullr...@loop.de wrote: Sorry. if I am wrong, I am not very well experienced with the required access rights. The background of my report is, that I tried to start the application umtsmon (a dialout application for 3g-modems) as a normal user, and I found no

Re: udev: chown of /dev/ppp

2010-07-17 Thread Hans-J. Ullrich
Am Sonntag, 18. Juli 2010 schrieb Marco d'Itri: Maybe this program needs to be modified to use a suid helper or a daemon which interacts with the hardware. But I can't see why it would need access to /dev/ppp. Marco, this problem is tellling: cant get access to /dev/ppp when it is started

Re: udev: chown of /dev/ppp

2010-07-17 Thread Russell Coker
On Sun, 18 Jul 2010, Hans-J. Ullrich hans.ullr...@loop.de wrote: Is it corrrect, what russel told, that /usr/sbin/pppd should be set to rwxsrxr-x root:dip ? It should not be set to 04755 unless you want everyone on the system to be able to run it - which probably isn't what you desire. On my

Re: udev: chown of /dev/ppp

2010-07-17 Thread Marco d'Itri
On Jul 18, Hans-J. Ullrich hans.ullr...@loop.de wrote: Mine is set to rwxr-xr-x root:root, although it is installed by default (I didn't change anything). I highly doubt it. This is how it is installed on Debian systems: -rwsr-xr-- 1 root dip 269540 Jul 26 2008 /usr/sbin/pppd* -- ciao,

Re: udev: chown of /dev/ppp

2010-07-17 Thread Hans-J. Ullrich
Am Sonntag, 18. Juli 2010 schrieben Sie: On Sun, 18 Jul 2010, Hans-J. Ullrich hans.ullr...@loop.de wrote: Is it corrrect, what russel told, that /usr/sbin/pppd should be set to rwxsrxr-x root:dip ? It should not be set to 04755 unless you want everyone on the system to be able to run it -