Date: Thu, 3 Jul 2003 14:51:10 -0700 From: Matthew Hunt <mph@astro.caltech.edu> To: K Anderson <freebsduser@comcast.net> Cc: freebsd-questions@freebsd.org Subject: Re: Disable PING command Message-ID: <20030703215110.GA24901@wopr.caltech.edu> In-Reply-To: <3F049A3D.3040104@comcast.net> References: <Law11-F108KHs7c6NdD00055715@hotmail.com> <3F049A3D.3040104@comcast.net>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Jul 03, 2003 at 02:03:57PM -0700, K Anderson wrote: > Good luck. All it takes is a user to port, transfere, compile, copy, > move or hack in a ping command of their own. Any languages could be > used, PERL, PHP, Python and much more. Well, it takes that along with making their copy SUID root, which they presumably can't do. wopr:~$ sudo chmod u-s /sbin/ping wopr:~$ ping wopr ping: socket: Operation not permitted wopr:~$ sudo chmod u+s /sbin/ping wopr:~$ ping wopr PING wopr.caltech.edu (131.215.103.10): 56 data bytes 64 bytes from 131.215.103.10: icmp_seq=0 ttl=64 time=0.240 ms -- Matthew Hunt <mph@astro.caltech.edu> * Science rules. http://www.pobox.com/~mph/ *
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030703215110.GA24901>