Skip site navigation (1)Skip section navigation (2) 
Date:      Wed, 1 Dec 1999 15:54:07 -0600
From:      "David W. Chapman Jr." <dchapman@houabg.com>
To:        <current@freebsd.org>
Subject:   su and traceroute
Message-ID:  <014801bf3c46$97e4e140$931576d8@inethouston.net>
index | next in thread | raw e-mail 

[-- Attachment #1 --]
I just cvsuped to -current right after bind-8.2.2 was merged into the source tree.  I noticed two problems.  Su won't work and traceroute gives me the following

traceroute: icmp socket: Operation not permitted

here are its permissions

-r-sr-xr-x  1 root  wheel  12076 Dec  1 14:15 /usr/sbin/traceroute

su just says Sorry and it has the same permissions, I ran gdb on it and here's a screen shot

253                             if (pwd->pw_uid == 0 && (gr = getgrgid((gid_t)0)) &&
(gdb) step
255                                     for (g = gr->gr_mem;; ++g) {
(gdb) step
256                                             if (!*g) {
(gdb) step
262                                             if (strcmp(username, *g) == 0) {
(gdb) step
255                                     for (g = gr->gr_mem;; ++g) {
(gdb) step
256                                             if (!*g) {
(gdb) step
262                                             if (strcmp(username, *g) == 0) {
(gdb) step
271                     if (*pwd->pw_passwd) {
(gdb) step
278                             p = skey_getpass("Password:", pwd, 1);
(gdb) step
Password:
279                             if (!(!strcmp(pwd->pw_passwd, skey_crypt(p, pwd->pw_passwd, pwd, 1))
(gdb) step
292                                             fprintf(stderr, "Sorry\n");
(gdb)



Anyone have any ideas?  I am in the wheel group, but I shouldn't have to be for traceroute and I have this problem for all users, including new ones that I create.

[-- Attachment #2 --]
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content="text/html; charset=iso-8859-1" http-equiv=Content-Type>
<META content="MSHTML 5.00.2919.6307" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>I just cvsuped to -current right after bind-8.2.2 
was merged into the source tree.&nbsp; I noticed two problems.&nbsp; Su won't 
work and traceroute gives me the following</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=Arial size=2>traceroute: icmp socket: Operation not 
permitted</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=Arial size=2>here are its permissions</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=Arial size=2>-r-sr-xr-x&nbsp; 1 root&nbsp; wheel&nbsp; 12076 
Dec&nbsp; 1 14:15 /usr/sbin/traceroute</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=Arial size=2>su just says Sorry and it has the same permissions, 
I ran gdb on it and here's a screen shot</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=Arial 
size=2>253&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
if (pwd-&gt;pw_uid == 0 &amp;&amp; (gr = getgrgid((gid_t)0)) &amp;&amp;<BR>(gdb) 
step<BR>255&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
for (g = gr-&gt;gr_mem;; ++g) {<BR>(gdb) 
step<BR>256&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
if (!*g) {<BR>(gdb) 
step<BR>262&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
if (strcmp(username, *g) == 0) {<BR>(gdb) 
step<BR>255&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
for (g = gr-&gt;gr_mem;; ++g) {<BR>(gdb) 
step<BR>256&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
if (!*g) {<BR>(gdb) 
step<BR>262&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
if (strcmp(username, *g) == 0) {<BR>(gdb) 
step<BR>271&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
if (*pwd-&gt;pw_passwd) {<BR>(gdb) 
step<BR>278&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
p = skey_getpass("Password:", pwd, 1);<BR>(gdb) 
step<BR>Password:<BR>279&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
if (!(!strcmp(pwd-&gt;pw_passwd, skey_crypt(p, pwd-&gt;pw_passwd, pwd, 
1))<BR>(gdb) 
step<BR>292&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
fprintf(stderr, "Sorry\n");<BR>(gdb)<BR></FONT></DIV>
<DIV><FONT face=Arial size=2></FONT>&nbsp;</DIV>
<DIV><FONT face=Arial size=2></FONT>&nbsp;</DIV>
<DIV><FONT face=Arial size=2>Anyone have any ideas?&nbsp; I am in the wheel 
group, but I shouldn't have to be for traceroute and I have this problem for all 
users, including new ones that I create.</DIV></FONT></BODY></HTML>
help

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?014801bf3c46$97e4e140$931576d8>