On Wed, 14 Oct 1998, Joe Laffey wrote:

> When users try to execute ping they get a message saying that the socket
> can't be opened :permission denied.
> 
> Where is this configured? 
> 
> Anyone have any good suggestions for guidlines for setting up permissions?
> Books?
> 
> In other words, what's the best way to grant as little permission to users
> as possible while still allowing them to use tools, etc. ?

I believe, if I'm remembering right, that most BSD's require anything that
creates ICMP sockets to be running setuid root.  Try

chmod a+s $(which ping)


Later,
David

David A. Gatwood                         Visit globegate's internet
dgatwood@globegate.utm.edu                  talker, Deep Space 36
http://globegate.utm.edu                telnet globegate.utm.edu:9624

-----BEGIN GEEK CODE BLOCK-----
Version 3.1
GCS/CC/FA/H/L/MC/M/MU/PA/TW d-@ s:>- a-- C++ ++>$ UBLAS*++ ++>$
P+?>$ L++ +>$ !E--- W++ +>$ N++(++ +)>++ +$ !o? K-? !w--- !O
M++>$ !V-- PS+>$ !PE- Y+>$ PGP+>$ t++ +>$ 5+>++ ++$ !X- !R tv+>$
b++>$ !DI !D- G++(++ +)>$ e>++ ++ h--! r--- !y-

------END GEEK CODE BLOCK------