Arch Linux

praka123

Member

From: Kerala,India

Registered: 2008-03-04

Posts: 188

Website

which sec group I add for dialing out using "pon pppoe" starting pppd?

here are the secondary groups for my user:

[root@myhost ~]# groups prakash 
disk wheel games network video audio optical storage users

For dialing as a local user ,which secondary group should I add?
here are the groups root is member of :-

[root@myhost ~]# groups 
root bin daemon sys adm disk wheel log

it is a pppoe broadband connection.I have to start pppd also .
the script is placed at /etc/ppp/peers/pppoe .
I am dialing as root "pon pppoe" to connect and "poff" to disconnect.
Thank You:)

praka123

Member

From: Kerala,India

Registered: 2008-03-04

Posts: 188

Website

Re: which sec group I add for dialing out using "pon pppoe" starting pppd?

nevertheless,I found that,unlike Debian or ubuntu,pppd is not having suid enabled

 
Debian:
root@myhost:~# ll /mnt/usr/sbin/pppd
-rwsr-xr-- 1 root 30 260920 2007-04-14 06:29 /mnt/usr/sbin/pppd

and:

root@myhost:~# ll /usr/sbin/pppd
-r-xr-xr-x 1 root root 244136 2007-11-16 03:26 /usr/sbin/pppd

Can I enable suid bit on pppd?Is it safe? :confused:

pelle.k

Member

From: Åre, Sweden (EU)

Registered: 2006-04-30

Posts: 667

Re: which sec group I add for dialing out using "pon pppoe" starting pppd?

Hey, thanks. Setuid root was the solution for me. Never thought of that.

GNOME PPP: STDERR: --> Carrier detected.  Starting PPP immediately.
GNOME PPP: STDERR: --> Starting pppd at Fri Aug  8 04:44:25 2008
GNOME PPP: STDERR: --> Pid of pppd: 6474
GNOME PPP: STDERR: --> Disconnecting at Fri Aug  8 04:44:25 2008
GNOME PPP: STDERR: --> The PPP daemon has died: No root priv error (exit code = 3)
GNOME PPP: STDERR: --> man pppd explains pppd error codes in more detail.
GNOME PPP: STDERR: --> I guess that's it for now, exiting
GNOME PPP: STDERR: --> The PPP daemon has died. (exit code = 3)

Basically, it would connect then immidiately disconnect.

Can I enable suid bit on pppd?Is it safe?

Programs that run 'set uid root' are potential security holes and you should be extremely cautious about making programs 'suid root'. A number of programs (including pppd) have been carefully written to minimise the danger of running suid root, so you should be safe with this one, (but no guarantees). http://tldp.org/HOWTO/PPP-HOWTO/root.html

---

"Your beliefs can be like fences that surround you.
You must first see them or you will not even realize that you are not free, simply because you will not see beyond the fences.
They will represent the boundaries of your experience."
SETH / Jane Roberts

rzs0502

Member

From: Johannesburg, South Africa

Registered: 2008-12-19

Posts: 6

Re: which sec group I add for dialing out using "pon pppoe" starting pppd?

Thanks Prakash.
Was using sudo till I saw this post.

Regards,

Rakesh