Article View: aus.computers.linux
Article #57217PPP/suid problem
From: JENKINS ROBERT
Date: Fri, 01 Nov 1996 00:00
Date: Fri, 01 Nov 1996 00:00
47 lines
2271 bytes
2271 bytes
Hi, Just got around to installing kernel v2.0.0 last night, which itself went fine. However, I now have a problem with the set of scripts I use to call up the ppd daemon. The scripts are set up as follows: annex - calls pppd with the "connect script" option among others. chat-script - called by the "connect" option above, it's really just "chat -f args" args - contains all the chat arguments, including my ppp account password. All of these were/are shell scripts. I used this set up to hide password. The basic problem is that I can't seem to set things up now so that either the args script or /dev/modem are *not* world-readable, which I would rather like to have. I.e. one of them needs to be world readable in order for the set-up to work. It seems in going from 1.3.20 to 2.0.0 that SUID shell scripts are no longer supported, which I'm all in favour of if it makes things more secure. So I've tried fiddling around with a "C-wrapper" and making that SUID. That helped with accessing /dev/modem, but the args script must still be world-readable for it to work. I get the message "Connect script failed" in /var/log/messages. The current set-up is: annex.new - C-wrapper (just a call to execl()) chat-script - as above args - as above Does the chat-script also need to be an SUIDed C-wrapper? Oh, pppd seems to have "PPP support not in kernel" as some sort of default error message, which I didn't find very helpful. (And yes, it *is* compiled in thankyouverymuch. How do you think I posted this?) Rob -- ====================================================================== I will not attempt irony or sarcasm on USENET. I will not attempt iro ny or sarcasm on USENET. I will not attempt irony or sarcasm on USENE T. I will not attempt irony or sarcasm on USENET. I will not attempt
Technical Details
Message-ID:
<jenr95.846827209@octarine>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailShow Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 102983,3020a413d155d086,start X-Google-Attributes: gid102983,public From: jenr95@octarine.adfa.oz.au (JENKINS ROBERT) Subject: PPP/suid problem Date: 1996/11/01 Message-ID: <jenr95.846827209@octarine> X-Deja-AN: 193659605 organization: ADFA News Service keywords: ppp pppd suid c-wrapper newsgroups: aus.computers.linux