Skip site navigation (1)Skip section navigation (2) 
Date:      Wed, 1 Dec 1999 15:54:07 -0600
From:      "David W. Chapman Jr." <dchapman@houabg.com>
To:        <current@freebsd.org>
Subject:   su and traceroute
Message-ID:  <014801bf3c46$97e4e140$931576d8@inethouston.net>
next in thread | raw e-mail | index | archive | help 
This is a multi-part message in MIME format.

------=_NextPart_000_0145_01BF3C14.4CCD5200
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

I just cvsuped to -current right after bind-8.2.2 was merged into the =
source tree.  I noticed two problems.  Su won't work and traceroute =
gives me the following

traceroute: icmp socket: Operation not permitted

here are its permissions

-r-sr-xr-x  1 root  wheel  12076 Dec  1 14:15 /usr/sbin/traceroute

su just says Sorry and it has the same permissions, I ran gdb on it and =
here's a screen shot

253                             if (pwd->pw_uid =3D=3D 0 && (gr =3D =
getgrgid((gid_t)0)) &&
(gdb) step
255                                     for (g =3D gr->gr_mem;; ++g) {
(gdb) step
256                                             if (!*g) {
(gdb) step
262                                             if (strcmp(username, *g) =
=3D=3D 0) {
(gdb) step
255                                     for (g =3D gr->gr_mem;; ++g) {
(gdb) step
256                                             if (!*g) {
(gdb) step
262                                             if (strcmp(username, *g) =
=3D=3D 0) {
(gdb) step
271                     if (*pwd->pw_passwd) {
(gdb) step
278                             p =3D skey_getpass("Password:", pwd, 1);
(gdb) step
Password:
279                             if (!(!strcmp(pwd->pw_passwd, =
skey_crypt(p, pwd->pw_passwd, pwd, 1))
(gdb) step
292                                             fprintf(stderr, =
"Sorry\n");
(gdb)



Anyone have any ideas?  I am in the wheel group, but I shouldn't have to =
be for traceroute and I have this problem for all users, including new =
ones that I create.

------=_NextPart_000_0145_01BF3C14.4CCD5200
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content=3D"text/html; charset=3Diso-8859-1" =
http-equiv=3DContent-Type>
<META content=3D"MSHTML 5.00.2919.6307" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2>I just cvsuped to -current right after =
bind-8.2.2=20
was merged into the source tree.&nbsp; I noticed two problems.&nbsp; Su =
won't=20
work and traceroute gives me the following</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>traceroute: icmp socket: Operation not=20
permitted</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>here are its permissions</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>-r-sr-xr-x&nbsp; 1 root&nbsp; =
wheel&nbsp; 12076=20
Dec&nbsp; 1 14:15 /usr/sbin/traceroute</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>su just says Sorry and it has the same =
permissions,=20
I ran gdb on it and here's a screen shot</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3DArial=20
size=3D2>253&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n=
bsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=20
if (pwd-&gt;pw_uid =3D=3D 0 &amp;&amp; (gr =3D getgrgid((gid_t)0)) =
&amp;&amp;<BR>(gdb)=20
step<BR>255&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n=
bsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nb=
sp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;=20
for (g =3D gr-&gt;gr_mem;; ++g) {<BR>(gdb)=20
step<BR>256&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n=
bsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nb=
sp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=20
if (!*g) {<BR>(gdb)=20
step<BR>262&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n=
bsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nb=
sp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=20
if (strcmp(username, *g) =3D=3D 0) {<BR>(gdb)=20
step<BR>255&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n=
bsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nb=
sp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;=20
for (g =3D gr-&gt;gr_mem;; ++g) {<BR>(gdb)=20
step<BR>256&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n=
bsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nb=
sp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=20
if (!*g) {<BR>(gdb)=20
step<BR>262&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n=
bsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nb=
sp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=20
if (strcmp(username, *g) =3D=3D 0) {<BR>(gdb)=20
step<BR>271&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n=
bsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=20
if (*pwd-&gt;pw_passwd) {<BR>(gdb)=20
step<BR>278&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n=
bsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nb=
sp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=20
p =3D skey_getpass("Password:", pwd, 1);<BR>(gdb)=20
step<BR>Password:<BR>279&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n=
bsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=20
if (!(!strcmp(pwd-&gt;pw_passwd, skey_crypt(p, pwd-&gt;pw_passwd, pwd,=20
1))<BR>(gdb)=20
step<BR>292&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n=
bsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nb=
sp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=20
fprintf(stderr, "Sorry\n");<BR>(gdb)<BR></FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>Anyone have any ideas?&nbsp; I am in =
the wheel=20
group, but I shouldn't have to be for traceroute and I have this problem =
for all=20
users, including new ones that I create.</DIV></FONT></BODY></HTML>

------=_NextPart_000_0145_01BF3C14.4CCD5200--



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?014801bf3c46$97e4e140$931576d8>