Re: GTK setuid problem

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tue, 20 Apr 2010 08:42:52 -0400 Paul Davis wrote:
> On Tue, Apr 20, 2010 at 3:22 AM, robin <robinpv@xxxxxxxxxxxxxxxx> wrote:
> 
> >     s = socket(AF_PACKET, SOCK_RAW, htons(ETH_P_ALL));
> 
> regular users can't do this on most (all?) linux systems. this is a
> highly priviledged operation, and its not a suprise that a regular
> user can't do this.

Just to be clear, since Robin didn't say anything about why he's doing
exactly that:
Opening a socket _AT THIS LOW A LEVEL_ is a highly
privileged operation. Unless the application is a net sniffer or
similarly evil hacker tool, you won't need it. So to my mind, without
knowing what Robin's application is, it seems likely that the correct
fix is either:
1) Only allow root to use it. After all, it's a dangerous tool
or
2) Fix the socket instantiation so that it doesn't need such privileges.

Cheers,
Rob
_______________________________________________
gtk-list mailing list
gtk-list@xxxxxxxxx
http://mail.gnome.org/mailman/listinfo/gtk-list


[Index of Archives]     [Touch Screen Library]     [GIMP Users]     [Gnome]     [KDE]     [Yosemite News]     [Steve's Art]

  Powered by Linux