On Thu, Oct 03, 2019 at 02:07:58PM -0400, Henry Bonath wrote: > Hello Misc, > > I had thought that I had configured the looking glass correctly per the man > page, > I have everything else working correctly, with custom header and footer > with CSS and all works great. > Whenever I attempt to ping/traceroute from the webpage, it simlpy reports: > "failed." > > Here is what permissions look like: (set to 4555, per the man page) > # ls -l /var/www/bin > total 3584 > -r-xr-xr-x 1 root bin 336016 Apr 13 16:35 bgpctl > -r-sr-xr-x 2 www bin 366536 Apr 13 16:35 ping > -r-sr-xr-x 2 www bin 366536 Apr 13 16:35 ping6 > -r-sr-xr-x 2 www bin 325320 Apr 13 16:35 traceroute > -r-sr-xr-x 2 www bin 325320 Apr 13 16:35 traceroute6
The ping* and traceroute* binaries need to be setuid root not setuid www. The root privs are needed to open the raw socket after that privs are dropped. Also check the mail from Theo about nosuid mount option on /var > OpenBSD version is 6.5 amd64. > > Is there anything I am missing that I would need to do in order to make > this work? > Thanks in advance! > -Henry -- :wq Claudio
