From: <nu...@r4...> - 2000-05-22 20:40:39
|
> > The actual device names aside, what do you mean up letting ifconfig ONLY > configure umn and lo? Are you talking about me shipping a restricted ifconfig > that people are supposed to make suid root? yup....some kind of checking to make sure the arguments are what UML will be using.... > That can be done with a perl > script or a little binary that checks its arguments and execs ifconfig. > perl script is out of the question...SUID scripts is even worse (well maybe not) than SUID ifconfig. A simple binary is probably a better idea. > Long-term, I do think that ifconfig needs to lighten up a bit. Maybe by > looking at the permissions of the tap devices (which I don't think it does > now). I dont know TOO much, but i think it's more a kernel thing that's restricting it from doing things..ifconfig doesn't really do much error checking... --buddy |