Date: Thu, 16 Nov 2000 21:37:33 +0000 From: Brian Somers <brian@Awfulhak.org> To: "Renaud Waldura" <renaud@waldura.com> Cc: "Brian Somers" <brian@Awfulhak.org>, hackers@FreeBSD.ORG, brian@Awfulhak.org Subject: Re: PPPoE w/ nat auto fragmentation hack? (use tcpmssd port) Message-ID: <200011162137.eAGLbYb42529@hak.lan.Awfulhak.org> In-Reply-To: Message from "Renaud Waldura" <renaud@waldura.com> of "Wed, 15 Nov 2000 19:26:25 PST." <002a01c04f7d$00699680$0402010a@biohz.net>
next in thread | previous in thread | raw e-mail | index | archive | help
> > ppp will run programs as the user id that invoked ppp rather than
> > using the effective user id (ie, it runs things as *you*, not *root*).
>
> Mmm-mmh. In my case, since ppp is started at boot time, the only user that
> ever invokes it is root, hence the tcpmssd thingy is run as root. As
> confirmed by the multiple "ps" I ran: euid == ruid == svguid == 0.
>
>
> > A good ``first step'' is to run
> > ! sh -c "/usr/local/bin/tcpmssd -p 12345 -i INTERFACE >/tmp/log 2>&1"
> > so that you can get to see any error messages - ppp redirects I/O to
>
> Yup, tried that, here's what I get:
>
> ******************** start ***************
> Wed Nov 15 13:30:12 PST 2000
> id says: uid=0(root) gid=0(wheel) groups=0(wheel)
> HOME=/
> PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin
> 01001 divert 1234 tcp from any to any out xmit tun0 setup
>
> The rule gets inserted, tcpmssd runs as root, and I feel like a dummy. Any
> other ideas?
>
> Thanks for the help Brian,
I'm not sure what the problem could be - can you confirm that
everything's seen if you divert everything ?
> --Renaud
>
>
>
> ----- Original Message -----
> From: Brian Somers <brian@Awfulhak.org>
> To: Renaud Waldura <renaud@waldura.com>
> Cc: Brian Somers <brian@Awfulhak.org>; <hackers@FreeBSD.ORG>;
> <brian@Awfulhak.org>
> Sent: Wednesday, November 15, 2000 4:32 PM
> Subject: Re: PPPoE w/ nat auto fragmentation hack? (use tcpmssd port)
>
>
> > > Maybe I'm just being boneheaded, but...
> > >
> > > > ! sudo ipfw add 40000 divert 12345 all from any to any via INTERFACE
> > > > ! sudo /usr/local/bin/tcpmssd -p 12345 -i INTERFACE
> > >
> > > I was under the (tested & confirmed) impression that programs executed
> by
> > > ppp are run under uid 0. Eg. I don't use "sudo" but the ipfw rule is
> added
> > > anyway, and tcpmssd is run as root.
> > >
> > > But maybe a sudo environment brings something else? That could explain a
> lot
> > > right there.
> > >
> > > --Renaud
> >
> > ppp will run programs as the user id that invoked ppp rather than
> > using the effective user id (ie, it runs things as *you*, not *root*).
> >
> > AFAIK, sudo will not muck about with your environment....
> >
> > A good ``first step'' is to run
> >
> > ! sh -c "/usr/local/bin/tcpmssd -p 12345 -i INTERFACE >/tmp/log 2>&1"
> >
> > so that you can get to see any error messages - ppp redirects I/O to
> > /dev/null by default.
--
Brian <brian@Awfulhak.org> <brian@[uk.]FreeBSD.org>
<http://www.Awfulhak.org>; <brian@[uk.]OpenBSD.org>
Don't _EVER_ lose your sense of humour !
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200011162137.eAGLbYb42529>