> perl script is out of the question...SUID scripts is even worse (well
> maybe not) than SUID ifconfig. A simple binary is probably a better
> idea.
I thought I read somewhere in the perl docs that safe suid perl scripts were
doable. Anyway, a binary would be easy enough, too. If you're so bothered by
it, why not write up a nice little ifconfig wrapper, and I'll distribute it
instead of my stupid um_ifconfig :-)
> I dont know TOO much, but i think it's more a kernel thing that's
> restricting it from doing things..ifconfig doesn't really do much
> error checking...
I think you're right.
BTW, configuring the device isn't the only permissions problem with the net.
In order to set up a slip device, you need to get a pty. I currently use a
pts device, and on some distros (like Debian) the permissions on /dev/pts
don't allow random users to do that. One more reason to go over to an
ethertap network.
Jeff
|
