From owner-freebsd-questions Fri Feb 9 20:51:59 1996 Return-Path: owner-questions Received: (from root@localhost) by freefall.freebsd.org (8.7.3/8.7.3) id UAA15268 for questions-outgoing; Fri, 9 Feb 1996 20:51:59 -0800 (PST) Received: from mramirez.sy.yale.edu (mramirez.sy.yale.edu [130.132.57.207]) by freefall.freebsd.org (8.7.3/8.7.3) with SMTP id UAA15260 for ; Fri, 9 Feb 1996 20:51:52 -0800 (PST) Received: (from mrami@localhost) by mramirez.sy.yale.edu (8.6.12/8.6.9) id XAA25157; Fri, 9 Feb 1996 23:51:54 -0500 Date: Fri, 9 Feb 1996 23:51:53 -0500 (EST) From: Marc Ramirez Reply-To: mrami@minerva.cis.yale.edu To: Chad Shackley cc: "Garrett A. Wollman" , questions@FreeBSD.ORG Subject: Re: ping In-Reply-To: <199602092229.RAA14062@fs1.cris.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-questions@FreeBSD.ORG Precedence: bulk On Fri, 9 Feb 1996, Chad Shackley wrote: > >> What do I need to change to allow users to ping? > > > >You need to unbreak the permissions on the ping binary. > > > >-r-sr-xr-x 1 root bin 114688 Feb 5 17:14 /sbin/ping* > > An ls -l on ping shows: > > -rwxr-xr-x 1 root bin 118784 Nov 16 01:49 /sbin/ping > > And nobody else except root can do a ping without getting > > ping: socket: Permission denied It needs to be made setuid, i.e., it runs with the permissions of the owner, not the executor. $ chmod 4555 /sbin/ping as Mr. Wollman has it above. > I must have access to ping itself because if I type ping I get the command > line options for it. > > Chad > > > -- A tautology is a thing which is tautological.