Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 26 Aug 1998 14:34:54 +0200
From:      Eivind Eklund <eivind@yes.no>
To:        Matt Dillon <dillon@FreeBSD.ORG>, cvs-committers@FreeBSD.ORG, cvs-all@FreeBSD.ORG
Subject:   Re: cvs commit: src/sbin/ping ping.8 ping.c
Message-ID:  <19980826143454.03686@follo.net>
In-Reply-To: <199808260158.SAA07564@freefall.freebsd.org>; from Matt Dillon on Tue, Aug 25, 1998 at 06:58:41PM -0700
References:  <199808260158.SAA07564@freefall.freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Aug 25, 1998 at 06:58:41PM -0700, Matt Dillon wrote:
> dillon      1998/08/25 18:58:40 PDT
> 
>   Modified files:
>     sbin/ping            ping.8 ping.c 
>   Log:
>       (well tested at BEST): -i option can now take FP values (e.g. -i 0.1),
>       extremely useful for networking testing.  Other options secured from
>       user-level D.O.S. attacks.  -f, -s now root-only.  -i wait times < 1.0
>       root-only.

>>>  -c count limited to 100 and defaults to 16 when ping run
>>>       by non-root user.

Eh - does this mean that I have to su to root to be able to run a
continious ping?  This is IMO a step backwards - we commonly use ping
to find out if something (netwise close) is up yet.  I can see its use
for public shell servers, but for the way we use FreeBSD here, it will
be a hinder (employees are the only ones that have access to execute
anything; if somebody abuse it, I talk to them - if necessary, loudly
:-)

Suggestion: Could we create an /etc/security.conf where things like
this can be configured?  Thus we could have the best of both worlds...

Eivind.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19980826143454.03686>