Subject: Re: changes to routing socket semantics
To: David Carrel <carrel@cisco.com>
From: Jason Thorpe <thorpej@nas.nasa.gov>
List: tech-security
Date: 02/22/1997 12:25:53
On Sat, 22 Feb 1997 07:52:26 -0800
David Carrel <carrel@cisco.com> wrote:
> Can we now remove the call to getuid() in sbin/route/route.c ? Either
> that or change it to geteuid(). But since the kernel now enforces
> modifications to the routing socket, I would prefer completely removing
> this.
Sure, that sounds fine with me...
> The only difference to the user between removing the getuid() (and
> associated checks) and changing it to geteuid() is that the user sees:
> writing to routing socket: Permission denied
> instead of
> must be root to alter routing table
> if their permissions are wrong. I don't think the latter is that much more
> helpful. But to even things out, if I remove route(1)'s uid checks, I'll
> add a blurb to the DIAGNOSTICS section of the man page for "Permission
> Denied".
Yah, the blurb in the manual page is good... please go ahead and commit
these changes.
Thanks for the follow-up, Dave!
Jason R. Thorpe thorpej@nas.nasa.gov
NASA Ames Research Center Home: 408.866.1912
NAS: M/S 258-6 Work: 415.604.0935
Moffett Field, CA 94035 Pager: 415.428.6939