Search squid archive

Re: ICMP ping fails but Squid still runs

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



mån 2010-03-01 klockan 16:16 +1300 skrev Amos Jeffries:

> > I did set by hand
> > pinger_program /usr/lib64/squid/pinger
> > pinger_enable on
> > 
> > and i'm very shure that ping has X atributes,  what am I missing?
> > 
> > TIA
> > 
> > LD
> 
> I've been struggling with this one myself. It's something about the
> privilege levels when run under Squid.
> I suspect it's the no_suid() call when starting child helpers in
> src/ipc.cc

The squid pinger helper needs to be suid root or CAP_NET_RAW to work.
Has always been this way.

  chown root /path/to/libexec/pinger
  chmod u+s /path/to/libexec/pinger

alternatively (if filesystem capabilities is supported)

  setcap cap_net_raw=ep /path/to/libexec/pinger

Regards
Henrik


[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux