Running pon/poff as root is quite straightforward, otherwise...
On my Linux box with Debian 1.2.4 I created a pppusers group, I let
user nbern (born as member of group users) be a member of it (and also a
member of dialout, which is the group of /dev/ttyS1), and I set the
following files as belonging to the pppusers group:
/etc/ppp.chatscript with r-- permission for the group
/etc/ppp.options_out
/etc/ppp/options
(no pap and no chap is currently used, the whole login sequence
is done by chat... my previous ISP had pap but that is not
crypted either [and this provider is much more efficient for the
rest than our national monopolyst])
/usr/sbin/pppd with r-x permission for the group
/etc/ppp/ip-up
/etc/ppp/ip-down
/etc/connect-errors with rw- permission for the group
/var/log/ppp.log<- It seems to make no difference
I could go up to this point, where I was stuck:
Apr 22 11:04:41 nick pppd[2036]: pppd 2.2.0 started by nbern, uid 1000
Apr 22 11:05:01 nick pppd[2036]: Serial connection established.
Apr 22 11:05:02 nick pppd[2036]: ioctl(PPPIOCGUNIT): Operation not permitted
Apr 22 11:05:02 nick pppd[2036]: ioctl(PPPIOCGDEBUG): Operation not permitted
Apr 22 11:05:02 nick pppd[2036]: Exit.
I could run pon as nbern only after typing this as root:
-> chmod u+s /usr/sbin/pppd <---
Notice, no difference with g+s or g-s (g+s alone does not work).
But I _have_ to give pppd to the pppusers group, otherwise I get this
complain again:
/usr/bin/pon: /usr/sbin/pppd: Permission denied
Here I am.
IS ALL THIS CORRECT OR AM I MISSING SOME SECURITY ISSUE?
I'll be away since tomorrow Thursday 24th and won't be able to read
incoming messages until Monday 28th, so please don't think I'm not polite
if I don't answer immediately.
Anyway, thank you in advance.
Nicola Bernardelli <[EMAIL PROTECTED]>
---
Please use <[EMAIL PROTECTED]> for messages from any kind of
robot, such as mailing lists. From that address no autoresponse
messages will return even when I'm not at home.
---
--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
[EMAIL PROTECTED] .
Trouble? e-mail to [EMAIL PROTECTED] .
