From owner-freebsd-hackers Sun Feb 15 20:46:51 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id UAA25610 for freebsd-hackers-outgoing; Sun, 15 Feb 1998 20:46:51 -0800 (PST) (envelope-from owner-freebsd-hackers@FreeBSD.ORG) Received: from apollo.ptway.com (apollo.ptway.com [199.176.148.3]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id UAA25596 for ; Sun, 15 Feb 1998 20:46:45 -0800 (PST) (envelope-from haskin@ptway.com) Received: from brianjr (123R1.infinitecom.com [199.176.148.66] (may be forged)) by apollo.ptway.com (8.8.7/8.8.7) with SMTP id XAA09260; Sun, 15 Feb 1998 23:49:36 -0500 Message-ID: <002a01bd3a95$d9259960$0b00000a@brianjr.haskin.org> From: "Brian Haskin" To: "Obi Wan Oblivion" , Subject: Re: IIJPPP & The Root User Date: Sun, 15 Feb 1998 23:46:27 -0500 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 4.72.2106.4 X-MimeOLE: Produced By Microsoft MimeOLE V4.72.2106.4 Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG -----Original Message----- From: Obi Wan Oblivion To: hackers@FreeBSD.ORG Date: Sunday, February 15, 1998 11:22 PM Subject: IIJPPP & The Root User >Howdy, > >Any reason why I shouldn't modify IIJPPP Version 1.2 (built on 9/23/97) to >allow uids other than zero to dialout? > >I share my physical system with a few people who want access to the net, >but I really don't want to dish out the root password to them. I'm >looking to keep the security, but add some flexibility. For instance: > > < if(getuid() != 0) > > > if((getuid() != 0) || (getgid() != 68)) > [snip] this should be something like this, if((getuid() !=0) && (getgid() != 68)) to get the desired effect. But why not just set it up in auto dial mode. (see the man page) Brian Haskin p.s. I don't know anything about the security implications of the change to the above source. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message