🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: aus.computers.linux
Article #57217

PPP/suid problem

#57217
From: JENKINS ROBERT
Date: Fri, 01 Nov 1996 00:00
47 lines
2271 bytes
Hi,	
	Just got around to installing kernel v2.0.0
last night, which itself went fine. However, I now
have a problem with the set of scripts I use to call
up the ppd daemon. The scripts are set up as follows:

	annex - calls pppd with the "connect script"
		option among others.
	chat-script - called by the "connect" option
		above, it's really just "chat -f args"
	args -	contains all the chat arguments,
		including my ppp account password.

	All of these were/are shell scripts. I used
this set up to hide password.
	The basic problem is that I can't seem to set
things up now so that either the args script or /dev/modem
are *not* world-readable, which I would rather like to have.
I.e. one of them needs to be world readable in order for
the set-up to work.
	It seems in going from 1.3.20 to 2.0.0 that
SUID shell scripts are no longer supported, which I'm all
in favour of if it makes things more secure. So I've
tried fiddling around with a "C-wrapper" and making that
SUID. That helped with accessing /dev/modem, but the
args script must still be world-readable for it to work.
I get the message "Connect script failed" in
/var/log/messages. The current set-up is:

	annex.new - C-wrapper (just a call to execl())
	chat-script - as above
	args        - as above

	Does the chat-script also need to be an SUIDed
 C-wrapper?
	Oh, pppd seems to have "PPP support not in kernel"
as some sort of default error message, which I didn't find
very helpful. (And yes, it *is* compiled in thankyouverymuch.
How do you think I posted this?)

				Rob
-- 
======================================================================
I will not attempt irony or sarcasm on USENET.  I will not attempt iro
ny or sarcasm on USENET.  I will not attempt irony or sarcasm on USENE
T.  I will not attempt irony or sarcasm on USENET.  I will not attempt
Technical Details
Message-ID: <jenr95.846827209@octarine>
Path: arc1-ca.pugleaf.net!unknown!not-for-mail

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 102983,3020a413d155d086,start
X-Google-Attributes: gid102983,public
From: jenr95@octarine.adfa.oz.au (JENKINS ROBERT)
Subject: PPP/suid problem
Date: 1996/11/01
Message-ID: <jenr95.846827209@octarine>
X-Deja-AN: 193659605
organization: ADFA News Service
keywords: ppp pppd suid c-wrapper
newsgroups: aus.computers.linux