Josh Rodman wrote:
* Jerry Lynn Kreps (jlkreps@navix.net) [990428 20:57]:
<snip>
as root do a "chmod a+s /usr/sbin/pppd
Please do _NOT_ do this. pppd is arleady suid root. Any user in the 'dialout' group should be able to run it. Any user who can run kppp can also run it. The chmod commad above simply will make the command 'set groupid' and 'sticky'. This confers no advatages and could concievably make trouble for you in the future.
Does every user that will run pppd have to be put in the dialout group?
Edit /etc/permissions and change the permission on pppd to 7555 so YaST doesn't change it every time YaST runs.
Again, do not do this. This will give any and all users on your system access to a setuid program. If you don't care about security at all, you could give everyone the root password and not worry about permissions, but otherwise I don't recommend this.
I started out with the install settings on pppd. You say that pppd is suid root already. If that setting is indicated by an 's' in the permissions area then my pppd was not suid root because the 's' tag wasn't in the permissions until I 'chmod a+s pppd' as root. (Couldn't do it unless I was root). I checked my group settings. Root is in the user list for the dialout group, but no other users are. In /dev, what should the permission flags and owner:user settings be for ttyS0, modem, etc.? -- JLK Linux, because it's STABLE, the source code is included, the price is right. -- To get out of this list, please send email to majordomo@suse.com with this text in its body: unsubscribe suse-linux-e Check out the SuSE-FAQ at <A HREF="http://www.suse.com/Support/Doku/FAQ/"><A HREF="http://www.suse.com/Support/Doku/FAQ/</A">http://www.suse.com/Support/Doku/FAQ/</A</A>> and the archive at <A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html"><A HREF="http://www.suse.com/Mailinglists/suse-linux-e/index.html</A">http://www.suse.com/Mailinglists/suse-linux-e/index.html</A</A>>