From Tue Mar 4 11:56:57 2008 Date: Tue, 4 Mar 2008 11:56:57 -0800 (PST) From: Postmaster Subject: Message from mail server Content-Length: 95 Mime-Version: 1.0 Status: RO X-IMAP: 1204660617 41 Delete. This is a system message. --END+PSEUDO-- From dhain@sac.sfbay.sun.com Wed Feb 27 15:21:04 2008 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1RNL4nY009750 for ; Wed, 27 Feb 2008 15:21:04 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail3mpk.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m1RNL4QJ011977; Wed, 27 Feb 2008 15:21:04 -0800 (PST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JWX00J0J7J13600@nwk-avmta-1.sfbay.Sun.COM>; Wed, 27 Feb 2008 15:21:01 -0800 (PST) Received: from dm-sfbay-02.sfbay.sun.com ([129.146.11.31]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JWX00C5L7J0S2F0@nwk-avmta-1.sfbay.Sun.COM>; Wed, 27 Feb 2008 15:21:00 -0800 (PST) Received: from sac.sfbay.sun.com (new-sac.SFBay.Sun.COM [129.146.175.65]) by dm-sfbay-02.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m1RNL0US056901; Wed, 27 Feb 2008 15:21:00 -0800 (PST) Received: from sac.sfbay.sun.com (localhost [127.0.0.1]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1RNDTtf009502; Wed, 27 Feb 2008 15:13:29 -0800 (PST) Received: (from dhain@localhost) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8/Submit) id m1RNDTMk009498; Wed, 27 Feb 2008 15:13:29 -0800 (PST) Date: Wed, 27 Feb 2008 15:13:29 -0800 (PST) From: Daniel Hain Subject: Integrate fping into Solaris [PSARC/2008/160 FastTrack timeout 03/05/2008] To: PSARC-ext@sun.com Message-id: <200802272313.m1RNDTMk009498@sac.sfbay.sun.com> Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 Content-Length: 1798 Status: RO X-Status: $$$$ X-UID: 0000000001 I'm sponsoring this fast track for myself. The requested release binding is Minor. A man page is included in the case's materials Thanks, Dan Proposal: Integrate fping into Solaris Details: fping is a ping like program which uses the Internet Control Message Protocol (ICMP) echo request to determine if a host is up. fping is different from ping in that you can specify any number of hosts on the command line, or specify a file containing the lists of hosts to ping. Unlike ping, fping is meant to be used in scripts and its output is easy to parse. Instead of trying one host until it timeouts or replies, fping will send out a ping packet and move on to the next host in a round- robin fashion. If a host replies, it is noted and removed from the list of hosts to check. If a host does not respond within a certain time limit and/or retry limit it will be considered unreachable. Fping has been developed and maintained by Roland Schemers, RL "Bob" Morgan, David Papp and Thomas Dzubin - webpage http://fping.sourceforge.net. The current version of fping is 2.4b2_to-ipv6 (01/16/2002). Exported Interfaces: SUNWfping Uncommitted Package name /usr/bin/fping Committed Executable location fping Uncommitted Commandline syntax fping output - Not an Interface Doc Impact: New man page: fping.8 (see case directory) Security Impact: The program uses a raw socket to communicate and requires root access (geteuid() == 0). References: [1] http://fping.sourceforge.net/ - Home page [2] 6636635 Integrate fping-2.4b2_to-ipv6 into Solaris 6. Resources and Schedule 6.4. Steering Committee requested information 6.4.1. Consolidation C-team Name: sfw 6.5. ARC review type: FastTrack 6.6. ARC Exposure: open From Sebastien.Roy@sun.com Wed Feb 27 16:58:41 2008 Received: from sunmail2sca.sfbay.sun.com (sunmail2sca [129.145.155.234]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1S0wfSP013305 for ; Wed, 27 Feb 2008 16:58:41 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail2sca.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m1S0we0M016407 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Wed, 27 Feb 2008 16:58:41 -0800 (PST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JWX00E05C1SCX00@brm-avmta-1.central.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 27 Feb 2008 17:58:40 -0700 (MST) Received: from brmea-mail-4.sun.com ([192.18.98.36]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JWX00BTJC1RM180@brm-avmta-1.central.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 27 Feb 2008 17:58:39 -0700 (MST) Received: from fe-amer-10.sun.com ([192.18.109.80]) by brmea-mail-4.sun.com (8.13.6+Sun/8.12.9) with ESMTP id m1S0wdFo017429 for ; Thu, 28 Feb 2008 00:58:39 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0JWX00G01BVGUU00@mail-amer.sun.com> (original mail from Sebastien.Roy@Sun.COM) for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 27 Feb 2008 17:58:39 -0700 (MST) Received: from [192.168.1.4] ([71.174.191.147]) by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0JWX00LH2C1QUZ80@mail-amer.sun.com>; Wed, 27 Feb 2008 17:58:38 -0700 (MST) Date: Wed, 27 Feb 2008 19:58:37 -0500 From: Sebastien Roy Subject: Re: Integrate fping into Solaris [PSARC/2008/160 FastTrack timeout 03/05/2008] In-reply-to: <200802272313.m1RNDTMk009498@sac.sfbay.sun.com> Sender: Sebastien.Roy@sun.com To: Daniel Hain Cc: PSARC-ext@sun.com Message-id: <47C6073D.4010401@sun.com> Organization: Sun Microsystems MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 References: <200802272313.m1RNDTMk009498@sac.sfbay.sun.com> User-Agent: Thunderbird 2.0.0.9 (X11/20080128) Content-Length: 1003 Status: RO X-Status: $$$$ X-UID: 0000000002 A couple of comments regarding the man page: seb-1: "Unlike ping(8) , fping is meant to be used in scripts and its output is easy to parse." If it's meant to be used in scripts, then why is the output format "Not an Interface"? seb-2: "-d Use DNS to lookup address of return ping packet." Solaris has a name-service switch which allows the administrator to configure a naming service on a system-wide basis, which commonly-used APIs like gethostby*() and get*info() functions adhere to. Does fping really bypass all of that and use DNS directly? seb-3: The spec states: "The program uses a raw socket to communicate and requires root access (geteuid() == 0)." Yet the man page states: "-f Read list of system from a file. This option can only be used by the root user. Regular users should pipe in the file via stdin: fping < targets_file" That implies that users other than root can run the command. Which is accurate? -Seb From scott.rotondo@sun.com Wed Feb 27 17:41:35 2008 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1S1fYG4013820 for ; Wed, 27 Feb 2008 17:41:35 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id m1S1fLnG016651 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Thu, 28 Feb 2008 09:41:33 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JWX00A03E185Z00@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 27 Feb 2008 17:41:32 -0800 (PST) Received: from jurassic-x4600.sfbay.sun.com ([129.146.17.63]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JWX0060CE17LF40@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 27 Feb 2008 17:41:31 -0800 (PST) Received: from scott-rotondos-macbook-pro.local (punchin-rotondo.SFBay.Sun.COM [10.7.251.213]) by jurassic-x4600.sfbay.sun.com (8.14.2+Sun/8.14.2) with ESMTP id m1S1fUbq024862; Wed, 27 Feb 2008 17:41:31 -0800 (PST) Date: Wed, 27 Feb 2008 17:41:21 -0800 From: Scott Rotondo Subject: Re: Integrate fping into Solaris [PSARC/2008/160 FastTrack timeout 03/05/2008] In-reply-to: <200802272313.m1RNDTMk009498@sac.sfbay.sun.com> To: Daniel Hain Cc: PSARC-ext@sun.com Message-id: <47C61141.2020001@sun.com> MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 References: <200802272313.m1RNDTMk009498@sac.sfbay.sun.com> User-Agent: Thunderbird 2.0.0.12 (Macintosh/20080213) Content-Length: 424 Status: RO X-Status: $$$$ X-UID: 0000000003 Daniel Hain wrote: > > Security Impact: > > The program uses a raw socket to communicate and requires root access > (geteuid() == 0). > 1. Of course, you really mean that it requires sufficient privilege to use a raw socket. Please confirm that there will be no geteuid() == 0 check in the code. 2. If the program is only usable by a privileged user, might it belong in /usr/sbin instead of /usr/bin? Scott From Daniel.Hain@sun.com Wed Feb 27 20:22:12 2008 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1S4MCJb019689 for ; Wed, 27 Feb 2008 20:22:12 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail3mpk.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m1S4MBNw015298 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Wed, 27 Feb 2008 20:22:12 -0800 (PST) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JWX00I0FLGZIJ00@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 27 Feb 2008 20:22:11 -0800 (PST) Received: from sca-es-mail-1.sun.com ([192.18.43.132]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JWX006KILGYLSA0@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 27 Feb 2008 20:22:10 -0800 (PST) Received: from fe-sfbay-10.sun.com ([192.18.43.129]) by sca-es-mail-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id m1S4MAv5024042 for ; Wed, 27 Feb 2008 20:22:10 -0800 (PST) Received: from conversion-daemon.fe-sfbay-10.sun.com by fe-sfbay-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0JWX00J01LGCT600@fe-sfbay-10.sun.com> (original mail from Daniel.Hain@Sun.COM) for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 27 Feb 2008 20:22:10 -0800 (PST) Received: from Macintosh.local ([72.197.213.236]) by fe-sfbay-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0JWX003RPLGS06F0@fe-sfbay-10.sun.com>; Wed, 27 Feb 2008 20:22:10 -0800 (PST) Date: Wed, 27 Feb 2008 20:22:04 -0800 From: "Dan Hain (Work)" Subject: Re: Integrate fping into Solaris [PSARC/2008/160 FastTrack timeout 03/05/2008] In-reply-to: <47C61141.2020001@sun.com> Sender: Daniel.Hain@sun.com To: Scott Rotondo Cc: Daniel Hain , PSARC-ext@sun.com Message-id: <47C636EC.70303@sun.com> Organization: Solaris Revenue Product Engineering MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 References: <200802272313.m1RNDTMk009498@sac.sfbay.sun.com> <47C61141.2020001@sun.com> User-Agent: Thunderbird 2.0.0.9 (Macintosh/20071031) Content-Length: 766 Status: RO X-Status: $$$$ X-UID: 0000000004 Scott Rotondo wrote: > Daniel Hain wrote: > >> Security Impact: >> >> The program uses a raw socket to communicate and requires root >> access >> (geteuid() == 0). >> > > 1. Of course, you really mean that it requires sufficient privilege to > use a raw socket. Please confirm that there will be no geteuid() == 0 > check in the code. Yes, it requires sufficient privilege to use a raw socket. The actual line is "if( geteuid() )", so it's not good. The goal was to minimize the changes to the open source, however if that is not an option here I can make the changes that are needed. > > 2. If the program is only usable by a privileged user, might it belong > in /usr/sbin instead of /usr/bin? I think that is more appropriate. Thanks, Dan From Daniel.Hain@sun.com Wed Feb 27 21:04:26 2008 Received: from sunmail2sca.sfbay.sun.com (sunmail2sca [129.145.155.234]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1S54QQF020183 for ; Wed, 27 Feb 2008 21:04:26 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail2sca.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m1S54QYi004406 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Wed, 27 Feb 2008 21:04:26 -0800 (PST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JWX00A0XNFESP00@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 27 Feb 2008 21:04:26 -0800 (PST) Received: from sca-es-mail-1.sun.com ([192.18.43.132]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JWX007DJNFEFA90@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 27 Feb 2008 21:04:26 -0800 (PST) Received: from fe-sfbay-10.sun.com ([192.18.43.129]) by sca-es-mail-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id m1S54Q1U025391 for ; Wed, 27 Feb 2008 21:04:26 -0800 (PST) Received: from conversion-daemon.fe-sfbay-10.sun.com by fe-sfbay-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0JWX00B01NEL2E00@fe-sfbay-10.sun.com> (original mail from Daniel.Hain@Sun.COM) for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 27 Feb 2008 21:04:26 -0800 (PST) Received: from Macintosh.local ([72.197.213.236]) by fe-sfbay-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0JWX00J5ENFDW060@fe-sfbay-10.sun.com>; Wed, 27 Feb 2008 21:04:26 -0800 (PST) Date: Wed, 27 Feb 2008 21:04:24 -0800 From: Dan Hain Subject: Re: Integrate fping into Solaris [PSARC/2008/160 FastTrack timeout 03/05/2008] In-reply-to: <47C6073D.4010401@sun.com> Sender: Daniel.Hain@sun.com To: Sebastien Roy Cc: Daniel Hain , PSARC-ext@sun.com Message-id: <47C640D8.1040501@sun.com> Organization: Solaris Revenue Product Engineering MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 References: <200802272313.m1RNDTMk009498@sac.sfbay.sun.com> <47C6073D.4010401@sun.com> User-Agent: Thunderbird 2.0.0.9 (Macintosh/20071031) Content-Length: 1413 Status: RO X-Status: $$$$ X-UID: 0000000005 Sebastien Roy wrote: > A couple of comments regarding the man page: > > seb-1: > > "Unlike ping(8) , fping is meant to be used in scripts and its > output is > easy to parse." > > If it's meant to be used in scripts, then why is the output format > "Not an Interface"? Ok, it's an Interface. Should I include sample output from the various option mixes? I'm not sure how to document the interface. > > seb-2: > > "-d Use DNS to lookup address of return ping packet." > > Solaris has a name-service switch which allows the administrator to > configure a naming service on a system-wide basis, which commonly-used > APIs like gethostby*() and get*info() functions adhere to. Does fping > really bypass all of that and use DNS directly? No, both the "-d" and "-n" options use gethostbyaddr() > > seb-3: > > The spec states: > > "The program uses a raw socket to communicate and requires root > access > (geteuid() == 0)." > > Yet the man page states: > > "-f Read list of system from a file. This option can only be > used by > the root user. Regular users should pipe in the file via > stdin: > fping < targets_file" > > That implies that users other than root can run the command. Which is > accurate? The effective uid must be root to run the program. In addition, if the "-f" flag is specified, you really have to be root. Thanks, Dan From Nicolas.Williams@sun.com Wed Feb 27 21:09:22 2008 Received: from sunmail2sca.sfbay.sun.com (sunmail2sca [129.145.155.234]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1S59Msj020201 for ; Wed, 27 Feb 2008 21:09:22 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail2sca.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m1S59L6Y005673; Wed, 27 Feb 2008 21:09:22 -0800 (PST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JWX00C05NNLEW00@brm-avmta-1.central.sun.com>; Wed, 27 Feb 2008 22:09:21 -0700 (MST) Received: from binky.Central.Sun.COM ([129.153.128.104]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JWX0077ENNL9M30@brm-avmta-1.central.sun.com>; Wed, 27 Feb 2008 22:09:21 -0700 (MST) Received: from binky.Central.Sun.COM (localhost [127.0.0.1]) by binky.Central.Sun.COM (8.14.1+Sun/8.14.1) with ESMTP id m1S59KJ5022393; Wed, 27 Feb 2008 23:09:20 -0600 (CST) Received: (from nw141292@localhost) by binky.Central.Sun.COM (8.14.1+Sun/8.14.1/Submit) id m1S59Kb6022392; Wed, 27 Feb 2008 23:09:20 -0600 (CST) Date: Wed, 27 Feb 2008 23:09:20 -0600 From: Nicolas Williams Subject: Re: Integrate fping into Solaris [PSARC/2008/160 FastTrack timeout 03/05/2008] In-reply-to: <47C61141.2020001@sun.com> To: Scott Rotondo Cc: Daniel Hain , PSARC-ext@sun.com Reply-to: Nicolas.Williams@sun.com Mail-followup-to: Scott Rotondo , Daniel Hain , PSARC-ext@sun.com Message-id: <20080228050920.GO21674@Sun.COM> MIME-version: 1.0 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT Content-disposition: inline X-PMX-Version: 5.2.0.264296 References: <200802272313.m1RNDTMk009498@sac.sfbay.sun.com> <47C61141.2020001@sun.com> X-Authentication-warning: binky.Central.Sun.COM: nw141292 set sender to Nicolas.Williams@sun.com using -f User-Agent: Mutt/1.5.7i Content-Length: 306 Status: RO X-Status: $$$$ X-UID: 0000000006 On Wed, Feb 27, 2008 at 05:41:21PM -0800, Scott Rotondo wrote: > 2. If the program is only usable by a privileged user, might it belong > in /usr/sbin instead of /usr/bin? OT (Reply-To set): Waaa. I hope the ARC gets around to setting a precedent for placing low-risk in /usr/bin instead of /usr/sbin. From gww@eng.sun.com Wed Feb 27 21:26:12 2008 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1S5QCl2020294 for ; Wed, 27 Feb 2008 21:26:12 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail3mpk.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m1S5Q56l028047 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Wed, 27 Feb 2008 21:26:12 -0800 (PST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JWX00D23OFM4U00@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 27 Feb 2008 21:26:10 -0800 (PST) Received: from dm-eng-02.sfbay.sun.com ([129.146.11.32]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JWX00C97OFKSH10@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 27 Feb 2008 21:26:08 -0800 (PST) Received: from marduk.eng.sun.com (marduk.SFBay.Sun.COM [129.146.108.224]) by dm-eng-02.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m1S5Q8GF036700; Wed, 27 Feb 2008 21:26:08 -0800 (PST) Received: from marduk.eng.sun.com (localhost [127.0.0.1]) by marduk.eng.sun.com (8.13.6+Sun/8.12.11) with ESMTP id m1S5QffX002012; Wed, 27 Feb 2008 21:26:41 -0800 (PST) Received: (from gww@localhost) by marduk.eng.sun.com (8.13.6+Sun/8.12.11/Submit) id m1S5Qff6002011; Wed, 27 Feb 2008 21:26:41 -0800 (PST) Date: Wed, 27 Feb 2008 21:26:41 -0800 (PST) From: Gary Winiger Subject: Re: Integrate fping into Solaris [PSARC/2008/160 FastTrack timeout 03/05/2008] To: Sebastien.Roy@sun.com, Daniel.Hain@sun.com Cc: dhain@sac.sfbay.sun.com, PSARC-ext@sun.com Message-id: <200802280526.m1S5Qff6002011@marduk.eng.sun.com> Content-transfer-encoding: 7BIT X-Sun-Charset: US-ASCII X-PMX-Version: 5.2.0.264296 Content-Length: 736 Status: RO X-Status: $$$$ X-UID: 0000000007 > > "The program uses a raw socket to communicate and requires root > > access > > (geteuid() == 0)." > > > > Yet the man page states: > > > > "-f Read list of system from a file. This option can only be > > used by > > the root user. Regular users should pipe in the file via > > stdin: > > fping < targets_file" > > > > That implies that users other than root can run the command. Which is > > accurate? > > The effective uid must be root to run the program. In addition, if the > "-f" flag is specified, you really have to be root. And why is that? What about fping requires not following the Solaris policy of privilege? See PSARC/2002/188 Least Privilege for Solaris. Gary.. From gww@eng.sun.com Wed Feb 27 21:58:16 2008 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1S5wFgj020697 for ; Wed, 27 Feb 2008 21:58:15 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id m1S5vuiZ017743 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Thu, 28 Feb 2008 13:58:14 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JWX00G03PX0SF00@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 27 Feb 2008 21:58:12 -0800 (PST) Received: from dm-eng-02.sfbay.sun.com ([129.146.11.32]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JWX00C4UPWZSHA0@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 27 Feb 2008 21:58:11 -0800 (PST) Received: from marduk.eng.sun.com (marduk.SFBay.Sun.COM [129.146.108.224]) by dm-eng-02.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m1S5wBNq047502; Wed, 27 Feb 2008 21:58:11 -0800 (PST) Received: from marduk.eng.sun.com (localhost [127.0.0.1]) by marduk.eng.sun.com (8.13.6+Sun/8.12.11) with ESMTP id m1S5wixj002038; Wed, 27 Feb 2008 21:58:44 -0800 (PST) Received: (from gww@localhost) by marduk.eng.sun.com (8.13.6+Sun/8.12.11/Submit) id m1S5witP002037; Wed, 27 Feb 2008 21:58:44 -0800 (PST) Date: Wed, 27 Feb 2008 21:58:44 -0800 (PST) From: Gary Winiger Subject: Re: Integrate fping into Solaris [PSARC/2008/160 FastTrack timeout 03/05/2008] To: Scott.Rotondo@sun.com, Daniel.Hain@sun.com Cc: dhain@sac.sfbay.sun.com, PSARC-ext@sun.com Message-id: <200802280558.m1S5witP002037@marduk.eng.sun.com> Content-transfer-encoding: 7BIT X-Sun-Charset: US-ASCII X-PMX-Version: 5.2.0.264296 Content-Length: 1095 Status: RO X-Status: $$$$ X-UID: 0000000008 > > 1. Of course, you really mean that it requires sufficient privilege to > > use a raw socket. Please confirm that there will be no geteuid() == 0 > > check in the code. > Yes, it requires sufficient privilege to use a raw socket. The actual > line is "if( geteuid() )", so it's not good. The goal was to minimize > the changes to the open source, however if that is not an option here I > can make the changes that are needed. There's some cost to FOSS. Perhaps this is one. Consider what architectural intent such a test has. Is it motherhood? Does fping make access control decisions because it is privileged to do so? Or is this something where it should really be checking for sufficient privilege because there are partial success semantics where fping could do part of a task then fail for insufficient privilege and leave the system in a compromised state? Or is this something that can just be done away with and system call failures reported with perror and then exit? For Solaris use, should fping be added to a rights profile with net_rawaccess? Gary.. From Nicolas.Williams@sun.com Wed Feb 27 22:28:49 2008 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1S6SmE4022432 for ; Wed, 27 Feb 2008 22:28:48 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id m1S6Siwm029035; Thu, 28 Feb 2008 14:28:44 +0800 (SGT) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JWX00J01RBV0100@brm-avmta-1.central.sun.com>; Wed, 27 Feb 2008 23:28:43 -0700 (MST) Received: from binky.Central.Sun.COM ([129.153.128.104]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JWX007DRRBU9N60@brm-avmta-1.central.sun.com>; Wed, 27 Feb 2008 23:28:42 -0700 (MST) Received: from binky.Central.Sun.COM (localhost [127.0.0.1]) by binky.Central.Sun.COM (8.14.1+Sun/8.14.1) with ESMTP id m1S6Sfxp022476; Thu, 28 Feb 2008 00:28:41 -0600 (CST) Received: (from nw141292@localhost) by binky.Central.Sun.COM (8.14.1+Sun/8.14.1/Submit) id m1S6SfW7022475; Thu, 28 Feb 2008 00:28:41 -0600 (CST) Date: Thu, 28 Feb 2008 00:28:41 -0600 From: Nicolas Williams Subject: Re: Integrate fping into Solaris [PSARC/2008/160 FastTrack timeout 03/05/2008] In-reply-to: <47C636EC.70303@sun.com> To: "Dan Hain (Work)" Cc: Scott Rotondo , psarc-ext@sun.com, Daniel Hain Mail-followup-to: "Dan Hain (Work)" , Scott Rotondo , psarc-ext@sun.com, Daniel Hain Message-id: <20080228062841.GV21674@Sun.COM> MIME-version: 1.0 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT Content-disposition: inline X-PMX-Version: 5.2.0.264296 References: <200802272313.m1RNDTMk009498@sac.sfbay.sun.com> <47C61141.2020001@sun.com> <47C636EC.70303@sun.com> X-Authentication-warning: binky.Central.Sun.COM: nw141292 set sender to Nicolas.Williams@sun.com using -f User-Agent: Mutt/1.5.7i Content-Length: 620 Status: RO X-Status: $$$$ X-UID: 0000000009 On Wed, Feb 27, 2008 at 08:22:04PM -0800, Dan Hain (Work) wrote: > Yes, it requires sufficient privilege to use a raw socket. The actual > line is "if( geteuid() )", so it's not good. The goal was to minimize > the changes to the open source, however if that is not an option here I > can make the changes that are needed. You could always modify the build sequence to link in an interposer for getuid() that always returns 0, and leave the actual code alone... :^/ But I thought raw sockets require privilege everywhere they are available, so this sounds like a bug in the code that should be reported upstream. From scott.rotondo@sun.com Thu Feb 28 00:34:47 2008 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1S8Yk5w025526 for ; Thu, 28 Feb 2008 00:34:46 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail3mpk.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m1S8Yj5S005757; Thu, 28 Feb 2008 00:34:46 -0800 (PST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JWX00B0LX5X9900@nwk-avmta-1.sfbay.Sun.COM>; Thu, 28 Feb 2008 00:34:45 -0800 (PST) Received: from jurassic-x4600.sfbay.sun.com ([129.146.17.63]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JWX00INGX5WNY60@nwk-avmta-1.sfbay.Sun.COM>; Thu, 28 Feb 2008 00:34:44 -0800 (PST) Received: from scott-rotondos-macbook-pro.local (punchin-rotondo.SFBay.Sun.COM [10.7.251.213]) by jurassic-x4600.sfbay.sun.com (8.14.2+Sun/8.14.2) with ESMTP id m1S8YhHW025169; Thu, 28 Feb 2008 00:34:43 -0800 (PST) Date: Thu, 28 Feb 2008 00:34:33 -0800 From: Scott Rotondo Subject: Re: Integrate fping into Solaris [PSARC/2008/160 FastTrack timeout 03/05/2008] In-reply-to: <47C636EC.70303@sun.com> To: "Dan Hain (Work)" Cc: PSARC-ext@sun.com Message-id: <47C67219.8030902@sun.com> MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 References: <200802272313.m1RNDTMk009498@sac.sfbay.sun.com> <47C61141.2020001@sun.com> <47C636EC.70303@sun.com> User-Agent: Thunderbird 2.0.0.12 (Macintosh/20080213) Content-Length: 442 Status: RO X-Status: $$$$ X-UID: 0000000010 Dan Hain (Work) wrote: >> >> 2. If the program is only usable by a privileged user, might it belong >> in /usr/sbin instead of /usr/bin? > I think that is more appropriate. Another possibility, which I'm not necessarily endorsing, would be to make this a setuid root program (which immediately drops all unnecessary privileges upon startup). Then it would be usable by non-administrative users and would make sense in /usr/bin. Scott From scott.rotondo@sun.com Thu Feb 28 00:37:06 2008 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1S8b5aq025542 for ; Thu, 28 Feb 2008 00:37:06 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m1S8b0Hs011539; Thu, 28 Feb 2008 08:37:02 GMT Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JWX00B0BX9OIZ00@nwk-avmta-1.sfbay.Sun.COM>; Thu, 28 Feb 2008 00:37:00 -0800 (PST) Received: from jurassic-x4600.sfbay.sun.com ([129.146.17.63]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JWX00I41X9NO280@nwk-avmta-1.sfbay.Sun.COM>; Thu, 28 Feb 2008 00:37:00 -0800 (PST) Received: from scott-rotondos-macbook-pro.local (punchin-rotondo.SFBay.Sun.COM [10.7.251.213]) by jurassic-x4600.sfbay.sun.com (8.14.2+Sun/8.14.2) with ESMTP id m1S8awNC025280; Thu, 28 Feb 2008 00:36:59 -0800 (PST) Date: Thu, 28 Feb 2008 00:36:49 -0800 From: Scott Rotondo Subject: Re: Integrate fping into Solaris [PSARC/2008/160 FastTrack timeout 03/05/2008] In-reply-to: <47C640D8.1040501@sun.com> To: Dan Hain Cc: Sebastien Roy , Daniel Hain , PSARC-ext@sun.com Message-id: <47C672A1.9050506@sun.com> MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 References: <200802272313.m1RNDTMk009498@sac.sfbay.sun.com> <47C6073D.4010401@sun.com> <47C640D8.1040501@sun.com> User-Agent: Thunderbird 2.0.0.12 (Macintosh/20080213) Content-Length: 282 Status: RO X-Status: $$$$ X-UID: 0000000011 Dan Hain wrote: > > The effective uid must be root to run the program. In addition, if the > "-f" flag is specified, you really have to be root. The code must change so that effective uid 0 is not required. BTW, what is special about the -f option that requires root? Scott From scott.rotondo@sun.com Thu Feb 28 00:37:46 2008 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1S8bk0K025562 for ; Thu, 28 Feb 2008 00:37:46 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m1S8bjbJ002236; Thu, 28 Feb 2008 01:37:46 -0700 (MST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JWX00B0FXAXL300@nwk-avmta-1.sfbay.Sun.COM>; Thu, 28 Feb 2008 00:37:45 -0800 (PST) Received: from jurassic-x4600.sfbay.sun.com ([129.146.17.63]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JWX00IOAXAXO170@nwk-avmta-1.sfbay.Sun.COM>; Thu, 28 Feb 2008 00:37:45 -0800 (PST) Received: from scott-rotondos-macbook-pro.local (punchin-rotondo.SFBay.Sun.COM [10.7.251.213]) by jurassic-x4600.sfbay.sun.com (8.14.2+Sun/8.14.2) with ESMTP id m1S8biYP025333; Thu, 28 Feb 2008 00:37:44 -0800 (PST) Date: Thu, 28 Feb 2008 00:37:34 -0800 From: Scott Rotondo Subject: Re: Integrate fping into Solaris [PSARC/2008/160 FastTrack timeout 03/05/2008] In-reply-to: <20080228062841.GV21674@Sun.COM> To: "Dan Hain (Work)" , psarc-ext@sun.com, Daniel Hain Message-id: <47C672CE.8080203@sun.com> MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 References: <200802272313.m1RNDTMk009498@sac.sfbay.sun.com> <47C61141.2020001@sun.com> <47C636EC.70303@sun.com> <20080228062841.GV21674@Sun.COM> User-Agent: Thunderbird 2.0.0.12 (Macintosh/20080213) Content-Length: 626 Status: RO X-Status: $$$$ X-UID: 0000000012 Nicolas Williams wrote: > On Wed, Feb 27, 2008 at 08:22:04PM -0800, Dan Hain (Work) wrote: >> Yes, it requires sufficient privilege to use a raw socket. The actual >> line is "if( geteuid() )", so it's not good. The goal was to minimize >> the changes to the open source, however if that is not an option here I >> can make the changes that are needed. > > You could always modify the build sequence to link in an interposer for > getuid() that always returns 0, and leave the actual code alone... :^/ > Please no. Fix the code so that it tries the operation and reports a suitable error message if it fails. Scott From Darren.Moffat@sun.com Thu Feb 28 02:33:05 2008 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1SAX4k1028269 for ; Thu, 28 Feb 2008 02:33:05 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id m1SAWxa5002752 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Thu, 28 Feb 2008 18:33:04 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JWY0000H2N1J500@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@Sun.COM); Thu, 28 Feb 2008 02:33:01 -0800 (PST) Received: from gmp-eb-inf-1.sun.com ([192.18.6.21]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JWY00MIF2MZZ710@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@Sun.COM); Thu, 28 Feb 2008 02:33:00 -0800 (PST) Received: from fe-emea-09.sun.com (gmp-eb-lb-2-fe2.eu.sun.com [192.18.6.11]) by gmp-eb-inf-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id m1SAWw3x014654 for ; Thu, 28 Feb 2008 10:32:58 +0000 (GMT) Received: from conversion-daemon.fe-emea-09.sun.com by fe-emea-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0JWY00A012LIPM00@fe-emea-09.sun.com> (original mail from Darren.Moffat@Sun.COM) for PSARC-ext@Sun.COM (ORCPT PSARC-ext@Sun.COM); Thu, 28 Feb 2008 10:32:58 +0000 (GMT) Received: from [129.156.173.199] by fe-emea-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0JWY000XO2MXGC00@fe-emea-09.sun.com>; Thu, 28 Feb 2008 10:32:58 +0000 (GMT) Date: Thu, 28 Feb 2008 10:32:57 +0000 From: Darren J Moffat Subject: Re: Integrate fping into Solaris [PSARC/2008/160 FastTrack timeout 03/05/2008] In-reply-to: <200802280558.m1S5witP002037@marduk.eng.sun.com> Sender: Darren.Moffat@sun.com To: Gary Winiger Cc: Scott.Rotondo@sun.com, Daniel.Hain@sun.com, PSARC-ext@sun.com, dhain@sac.sfbay.sun.com Message-id: <47C68DD9.6010604@Sun.COM> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 References: <200802280558.m1S5witP002037@marduk.eng.sun.com> User-Agent: Thunderbird 2.0.0.9 (X11/20080116) Content-Length: 1555 Status: RO X-Status: $$$$ X-UID: 0000000013 Gary Winiger wrote: >>> 1. Of course, you really mean that it requires sufficient privilege to >>> use a raw socket. Please confirm that there will be no geteuid() == 0 >>> check in the code. >> Yes, it requires sufficient privilege to use a raw socket. The actual >> line is "if( geteuid() )", so it's not good. The goal was to minimize >> the changes to the open source, however if that is not an option here I >> can make the changes that are needed. > > There's some cost to FOSS. Perhaps this is one. Consider > what architectural intent such a test has. Is it motherhood? > Does fping make access control decisions because it is > privileged to do so? Or is this something where it should > really be checking for sufficient privilege because there are > partial success semantics where fping could do part of a task > then fail for insufficient privilege and leave the system in > a compromised state? Or is this something that can just > be done away with and system call failures reported with > perror and then exit? > > For Solaris use, should fping be added to a rights profile > with net_rawaccess? I think we need to stop and consider if fping is even appropriate. The OpenSolaris ping has been properly privilege bracketed and a lot of work has been done on securing it as it is a setuid root program. Rather than integrating fping shouldn't we instead consider adding the additional functionality that fping brings to the existing ping source and if necessary include a link to fping. -- Darren J Moffat From casper@holland.sun.com Thu Feb 28 02:49:50 2008 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1SAnoY8028332 for ; Thu, 28 Feb 2008 02:49:50 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m1SAnnMA036167 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@Sun.COM>; Thu, 28 Feb 2008 03:49:50 -0700 (MST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JWY002073F1FD00@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@Sun.COM (ORCPT PSARC-ext@Sun.COM); Thu, 28 Feb 2008 02:49:49 -0800 (PST) Received: from dm-holland-02.uk.sun.com ([129.156.101.225]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JWY00MNI3F0Z750@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@Sun.COM (ORCPT PSARC-ext@Sun.COM); Thu, 28 Feb 2008 02:49:48 -0800 (PST) Received: from holland (room101.Holland.Sun.COM [10.16.117.40]) by dm-holland-02.uk.sun.com (8.13.6+Sun/8.13.6/ENSMAIL,v2.2) with ESMTP id m1SAnhbk018927; Thu, 28 Feb 2008 10:49:44 +0000 (GMT) Date: Thu, 28 Feb 2008 11:49:43 +0100 From: Casper.Dik@sun.com Subject: Re: Integrate fping into Solaris [PSARC/2008/160 FastTrack timeout 03/05/2008] In-reply-to: <47C640D8.1040501@sun.com> Sender: casper@holland.sun.com To: Dan Hain Cc: Sebastien Roy , Daniel Hain , PSARC-ext@sun.com Message-id: <200802281049.m1SAnhbk018927@dm-holland-02.uk.sun.com> MIME-version: 1.0 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 References: <200802272313.m1RNDTMk009498@sac.sfbay.sun.com> <47C6073D.4010401@sun.com> <47C640D8.1040501@sun.com> Content-Length: 446 Status: RO X-Status: $$$$ X-UID: 0000000014 >The effective uid must be root to run the program. In addition, if the >"-f" flag is specified, you really have to be root. That is incorrect. (At least, it is bad for the program to enforce this; it MUST just attempt the system calls and have those fail or verify privileges but that is a relatively poor choice). Which privileges does it need for which functions? Will the program be added to the appropriate RBAC profile? Casper From Joep.Vesseur@sun.com Thu Feb 28 02:53:36 2008 Received: from sunmail2sca.sfbay.sun.com (sunmail2sca [129.145.155.234]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1SArZMY028474 for ; Thu, 28 Feb 2008 02:53:35 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail2sca.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m1SArZnh019511 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@Sun.COM>; Thu, 28 Feb 2008 02:53:35 -0800 (PST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JWY00H073LBJZ00@brm-avmta-1.central.sun.com> for PSARC-ext@Sun.COM (ORCPT PSARC-ext@Sun.COM); Thu, 28 Feb 2008 03:53:35 -0700 (MST) Received: from dm-holland-02.uk.sun.com ([129.156.101.225]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JWY00AMA3LAR140@brm-avmta-1.central.sun.com> for PSARC-ext@Sun.COM (ORCPT PSARC-ext@Sun.COM); Thu, 28 Feb 2008 03:53:35 -0700 (MST) Received: from sunnl.Holland.Sun.COM (sunnl.Holland.Sun.COM [129.159.237.90]) by dm-holland-02.uk.sun.com (8.13.6+Sun/8.13.6/ENSMAIL,v2.2) with ESMTP id m1SArS9u019750; Thu, 28 Feb 2008 10:53:28 +0000 (GMT) Received: from [10.16.117.32] (enigma.Holland.Sun.COM [10.16.117.32]) by sunnl.Holland.Sun.COM (8.13.8+Sun/8.13.8) with ESMTP id m1SArJTa016986; Thu, 28 Feb 2008 11:53:20 +0100 (MET) Date: Thu, 28 Feb 2008 11:53:18 +0100 From: Joep Vesseur Subject: Re: Integrate fping into Solaris [PSARC/2008/160 FastTrack timeout 03/05/2008] In-reply-to: <47C68DD9.6010604@Sun.COM> To: Darren J Moffat Cc: Gary Winiger , Scott.Rotondo@sun.com, Daniel.Hain@sun.com, PSARC-ext@sun.com, dhain@sac.sfbay.sun.com Message-id: <47C6929E.8040305@Sun.COM> MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 X-Enigmail-Version: 0.95.1 References: <200802280558.m1S5witP002037@marduk.eng.sun.com> <47C68DD9.6010604@Sun.COM> User-Agent: Thunderbird 2.0.0.9 (X11/20080129) Content-Length: 1865 Status: RO X-Status: $$$$ X-UID: 0000000015 On 02/28/08 11:32, Darren J Moffat wrote: > Gary Winiger wrote: >>>> 1. Of course, you really mean that it requires sufficient privilege >>>> to use a raw socket. Please confirm that there will be no geteuid() >>>> == 0 check in the code. >>> Yes, it requires sufficient privilege to use a raw socket. The >>> actual line is "if( geteuid() )", so it's not good. The goal was to >>> minimize the changes to the open source, however if that is not an >>> option here I can make the changes that are needed. >> >> There's some cost to FOSS. Perhaps this is one. Consider >> what architectural intent such a test has. Is it motherhood? >> Does fping make access control decisions because it is >> privileged to do so? Or is this something where it should >> really be checking for sufficient privilege because there are >> partial success semantics where fping could do part of a task >> then fail for insufficient privilege and leave the system in >> a compromised state? Or is this something that can just >> be done away with and system call failures reported with >> perror and then exit? >> >> For Solaris use, should fping be added to a rights profile >> with net_rawaccess? > > I think we need to stop and consider if fping is even appropriate. The > OpenSolaris ping has been properly privilege bracketed and a lot of work > has been done on securing it as it is a setuid root program. > > Rather than integrating fping shouldn't we instead consider adding the > additional functionality that fping brings to the existing ping source > and if necessary include a link to fping. My sentiments exactly. Not that we should reinvent the wheel for every FOSS bit, but the fping code dates back from 2001/2002 and I think it would need serious security review before it integrates as a setuid program. Joep From casper@holland.sun.com Thu Feb 28 02:58:25 2008 Received: from sunmail2sca.sfbay.sun.com (sunmail2sca [129.145.155.234]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1SAwP5g028773 for ; Thu, 28 Feb 2008 02:58:25 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail2sca.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m1SAwNiq020545 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@Sun.COM>; Thu, 28 Feb 2008 02:58:25 -0800 (PST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JWY00H133TCUB00@brm-avmta-1.central.sun.com> for PSARC-ext@Sun.COM (ORCPT PSARC-ext@Sun.COM); Thu, 28 Feb 2008 03:58:24 -0700 (MST) Received: from dm-holland-02.uk.sun.com ([129.156.101.225]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JWY00AVI3TBR340@brm-avmta-1.central.sun.com> for PSARC-ext@Sun.COM (ORCPT PSARC-ext@Sun.COM); Thu, 28 Feb 2008 03:58:24 -0700 (MST) Received: from holland (room101.Holland.Sun.COM [10.16.117.40]) by dm-holland-02.uk.sun.com (8.13.6+Sun/8.13.6/ENSMAIL,v2.2) with ESMTP id m1SAwGX8021177; Thu, 28 Feb 2008 10:58:16 +0000 (GMT) Date: Thu, 28 Feb 2008 11:58:16 +0100 From: Casper.Dik@sun.com Subject: Re: Integrate fping into Solaris [PSARC/2008/160 FastTrack timeout 03/05/2008] In-reply-to: <47C68DD9.6010604@Sun.COM> Sender: casper@holland.sun.com To: Darren J Moffat Cc: Gary Winiger , Scott.Rotondo@sun.com, Daniel.Hain@sun.com, PSARC-ext@sun.com, dhain@sac.sfbay.sun.com Message-id: <200802281058.m1SAwGX8021177@dm-holland-02.uk.sun.com> MIME-version: 1.0 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 References: <200802280558.m1S5witP002037@marduk.eng.sun.com> <47C68DD9.6010604@Sun.COM> Content-Length: 501 Status: RO X-Status: $$$$ X-UID: 0000000016 >I think we need to stop and consider if fping is even appropriate. The >OpenSolaris ping has been properly privilege bracketed and a lot of work >has been done on securing it as it is a setuid root program. > >Rather than integrating fping shouldn't we instead consider adding the >additional functionality that fping brings to the existing ping source >and if necessary include a link to fping. Well, I think such a "workalike" would need to be called "fping" to be useful, not? Casper From ro@techfak.uni-bielefeld.de Thu Feb 28 03:36:12 2008 Received: from sunmail2sca.sfbay.sun.com (sunmail2sca [129.145.155.234]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1SBaBIp029687 for ; Thu, 28 Feb 2008 03:36:12 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail2sca.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m1SBaBM7000806 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Thu, 28 Feb 2008 03:36:11 -0800 (PST) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JWY00F5L5KAWR00@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 28 Feb 2008 03:36:10 -0800 (PST) Received: from sca-ea-mail-4.sun.com ([192.18.43.22]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JWY003PS5K8BXA0@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 28 Feb 2008 03:36:08 -0800 (PST) Received: from relay41i.sun.com ([192.5.209.70]) by sca-ea-mail-4.sun.com (8.13.6+Sun/8.12.9) with ESMTP id m1SBVPNg003841 for ; Thu, 28 Feb 2008 11:36:08 +0000 (GMT) Received: from mms48es.sun.com ([160.41.221.231] [160.41.221.231]) by relay41i.sun.com with ESMTP id BT-MMP-206320 for PSARC-ext@sun.com; Thu, 28 Feb 2008 11:36:07 +0000 (Z) Received: from relay43i.sun.com (relay43i.sun.com [192.5.209.74]) by mms48es.sun.com with ESMTP id BT-MMP-3868707 for PSARC-ext@sun.com; Thu, 28 Feb 2008 11:36:07 +0000 (Z) Received: from smarthost.TechFak.Uni-Bielefeld.DE ([129.70.137.17] [129.70.137.17]) by relay4i.sun.com with ESMTP id BT-MMP-9466244 for PSARC-ext@sun.com; Thu, 28 Feb 2008 11:36:07 +0000 (Z) Received: from manam.TechFak.Uni-Bielefeld.DE (manam.TechFak.Uni-Bielefeld.DE [129.70.137.47]) (using TLSv1 with cipher EDH-RSA-DES-CBC3-SHA (168/168 bits)) (No client certificate requested) by smarthost.TechFak.Uni-Bielefeld.DE (Postfix) with ESMTP id AEDD9484D4; Thu, 28 Feb 2008 12:36:06 +0100 (CET) Date: Thu, 28 Feb 2008 12:36:05 +0100 From: Rainer Orth Subject: Re: Integrate fping into Solaris [PSARC/2008/160 FastTrack timeout 03/05/2008] In-reply-to: Daniel Hain's message of "Wed, 27 Feb 2008 15:13:29 -0800 (PST)" Sender: ro@techfak.uni-bielefeld.de To: Daniel Hain Cc: PSARC-ext@sun.com Message-id: MIME-version: 1.0 X-Mailer: Gnus v5.6.44/Emacs 19.34 Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 X-Brightmail-Tracker: AAAAAA== X-Antispam: No, score=0.0/5.0, scanned in 0.136sec at (localhost [127.0.0.1]) by smf-spamd v1.3.1 - http://smfs.sf.net/ Lines: 14 References: <200802272313.m1RNDTMk009498@sac.sfbay.sun.com> Content-Length: 401 Status: RO X-Status: $$$$ X-UID: 0000000017 Daniel Hain writes: > Doc Impact: > > New man page: fping.8 (see case directory) This should be fping(1m) if fping goes into /usr/sbin (and I think it should, to be consistent with ping(1M) which lives in /usr/sbin, too). Rainer -- ----------------------------------------------------------------------------- Rainer Orth, Faculty of Technology, Bielefeld University From carlsonj@phorcys.east.sun.com Thu Feb 28 04:28:41 2008 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1SCSeqj001576 for ; Thu, 28 Feb 2008 04:28:41 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id m1SCSPL9018509; Thu, 28 Feb 2008 20:28:36 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JWY00I0P7ZK4T00@nwk-avmta-2.sfbay.sun.com>; Thu, 28 Feb 2008 04:28:32 -0800 (PST) Received: from phorcys.east.sun.com ([129.148.174.143]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JWY003HA7ZKCDD0@nwk-avmta-2.sfbay.sun.com>; Thu, 28 Feb 2008 04:28:32 -0800 (PST) Received: from phorcys.east.sun.com (localhost [127.0.0.1]) by phorcys.east.sun.com (8.14.2+Sun/8.14.2) with ESMTP id m1SCSVH3025836; Thu, 28 Feb 2008 07:28:31 -0500 (EST) Received: (from carlsonj@localhost) by phorcys.east.sun.com (8.14.2+Sun/8.14.2/Submit) id m1SCSVDu025833; Thu, 28 Feb 2008 07:28:31 -0500 (EST) Date: Thu, 28 Feb 2008 07:28:31 -0500 From: James Carlson Subject: Re: Integrate fping into Solaris [PSARC/2008/160 FastTrack timeout 03/05/2008] In-reply-to: <20080228050920.GO21674@Sun.COM> To: Nicolas.Williams@sun.com Cc: Scott Rotondo , PSARC-ext@sun.com, Daniel Hain Message-id: <18374.43247.34045.323604@gargle.gargle.HOWL> MIME-version: 1.0 X-Mailer: VM 7.01 under Emacs 21.3.1 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 References: <200802272313.m1RNDTMk009498@sac.sfbay.sun.com> <47C61141.2020001@sun.com> <20080228050920.GO21674@Sun.COM> Content-Length: 1638 Status: RO X-Status: $$$$ X-UID: 0000000018 Nicolas Williams writes: > On Wed, Feb 27, 2008 at 05:41:21PM -0800, Scott Rotondo wrote: > > 2. If the program is only usable by a privileged user, might it belong > > in /usr/sbin instead of /usr/bin? > > OT (Reply-To set): But ignored. ;-} > Waaa. I hope the ARC gets around to setting a precedent for placing > low-risk in /usr/bin instead of /usr/sbin. We have a precedent. Things that are useful only for the system administrator go in /usr/sbin. Things that are useful for regular users go in /usr/bin. That precedent is documented on the filesystem(5) man page. It has nothing to do with privilege or risk. The only question to answer here (for this issue) is whether fping is useful for ordinary users. If it's not, then /usr/sbin would be the right answer. As for the privilege check, the reason the code does this is not that what it's doing requires special privilege (though it does). The reason is that the utility itself is mostly evil. Most users generally don't want people scanning subnets at high rates, looking for hosts to attack. The code has checks on the options to try to stop "mortals" from abusing the utility, but I think it's a fair question to ask whether 'we' (collectively) want this at all -- particularly as a bundled part of the system delivering from SFW. And I'm not sure this is a fast-track. It doesn't seem entirely obvious or non-controversial to me ... -- James Carlson, Solaris Networking Sun Microsystems / 35 Network Drive 71.232W Vox +1 781 442 2084 MS UBUR02-212 / Burlington MA 01803-2757 42.496N Fax +1 781 442 1677 From cyril.plisko@gmail.com Thu Feb 28 04:49:31 2008 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1SCnUvS001837 for ; Thu, 28 Feb 2008 04:49:30 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id m1SCnGD4027493 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Thu, 28 Feb 2008 20:49:29 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JWY00J058YF6100@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 28 Feb 2008 04:49:27 -0800 (PST) Received: from sca-ea-mail-3.sun.com ([192.18.43.21]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JWY0037S8YEBXE0@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 28 Feb 2008 04:49:26 -0800 (PST) Received: from relay15i.sun.com (ip125.net129179-4.block1.us.syntegra.com [129.179.4.125]) by sca-ea-mail-3.sun.com (8.13.6+Sun/8.12.9) with ESMTP id m1SClxQr001706 for ; Thu, 28 Feb 2008 12:49:26 +0000 (GMT) Received: from mmp14es.sun.com ([160.41.209.24] [160.41.209.24]) by relay15i.sun.com with ESMTP id BT-MMP-628828 for PSARC-ext@sun.com; Thu, 28 Feb 2008 12:49:26 +0000 (Z) Received: from relay13i.sun.com (relay13i.sun.com [129.179.4.123]) by mmp14es.sun.com with ESMTP id BT-MMP-110430 for PSARC-ext@sun.com; Thu, 28 Feb 2008 12:49:25 +0000 (Z) Received: from wf-out-1314.google.com ([209.85.200.173] [209.85.200.173]) by relay1i.sun.com with ESMTP id BT-MMP-6546283 for PSARC-ext@sun.com; Thu, 28 Feb 2008 12:49:25 +0000 (Z) Received: by wf-out-1314.google.com with SMTP id 28so2941978wfa.17 for ; Thu, 28 Feb 2008 04:47:37 -0800 (PST) Received: by 10.142.222.21 with SMTP id u21mr6279577wfg.189.1204202857167; Thu, 28 Feb 2008 04:47:37 -0800 (PST) Received: by 10.142.170.18 with HTTP; Thu, 28 Feb 2008 04:47:37 -0800 (PST) Date: Thu, 28 Feb 2008 14:47:37 +0200 From: Cyril Plisko Subject: Re: Integrate fping into Solaris [PSARC/2008/160 FastTrack timeout 03/05/2008] In-reply-to: <18374.43247.34045.323604@gargle.gargle.HOWL> Sender: cyril.plisko@gmail.com To: James Carlson Cc: Nicolas.Williams@sun.com, PSARC-ext@sun.com, Daniel Hain , Scott Rotondo Message-id: MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1 Content-transfer-encoding: 7BIT Content-disposition: inline DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:sender:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references:x-google-sender-auth; bh=TFRjFYpxoSnh9OLP8RqUe98Na1e1JFskSyXJmCFl9z0=; b=T4iXdE+D6hTAKhpKBjMdDR4OGSLWSQpb8isphvBbvqYXNDnSEsNbCqfQkCcRDdhMhfhKWz/IYWaBCpPwJhnR/jCNp4dj/qPz0Gr8Io/nI3n1APpGeMP7+wJHC2oAgBkG/LbtP3q8VpF+jfbF1XTENma8tyx/4exxTZRWdM+hllc= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:sender:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references:x-google-sender-auth; b=IOGMOgMezSs5sP7Uz5iDhgP6OlxCfUDU3swhogHxYz4NUnGiU8iujeYEcON/2SQyRNjqjJc7OsiMcq51CCM+VPQha/uRqpzuInNHj+BBdXIEWNW/i2BOHe7E7DNiuIHOj/paIW4nl5qWLtWcwgJZ5DuHLAPTriz6jfBkC25IWTs= X-PMX-Version: 5.2.0.264296 X-Brightmail-Tracker: AAAAAA== X-Google-Sender-Auth: 1faaefe0dbe7dc11 X-Antispam: No, score=-2.6/5.0, scanned in 0.055sec at (localhost [127.0.0.1]) by smf-spamd v1.3.1 - http://smfs.sf.net/ References: <200802272313.m1RNDTMk009498@sac.sfbay.sun.com> <47C61141.2020001@sun.com> <20080228050920.GO21674@Sun.COM> <18374.43247.34045.323604@gargle.gargle.HOWL> Content-Length: 782 Status: RO X-Status: $$$$ X-UID: 0000000019 On Thu, Feb 28, 2008 at 2:28 PM, James Carlson wrote: > > We have a precedent. Things that are useful only for the system > administrator go in /usr/sbin. Things that are useful for regular > users go in /usr/bin. > > That precedent is documented on the filesystem(5) man page. > > It has nothing to do with privilege or risk. The only question to > answer here (for this issue) is whether fping is useful for ordinary > users. If it's not, then /usr/sbin would be the right answer. > What criteria are used to determine whether a particular utility is useful for ordinary user ? I consider myself an ordinary user and I cannot imaging working w/o /usr/sbin in my path - I must be missing something obvious here... -- Regards, Cyril From Darren.Moffat@sun.com Thu Feb 28 04:58:19 2008 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1SCwJ9n002140 for ; Thu, 28 Feb 2008 04:58:19 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m1SCwIZl003379 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Thu, 28 Feb 2008 05:58:19 -0700 (MST) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JWY00J0P9D5HK00@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 28 Feb 2008 04:58:17 -0800 (PST) Received: from gmp-eb-inf-1.sun.com ([192.18.6.21]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JWY003OA9D4BXE0@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 28 Feb 2008 04:58:17 -0800 (PST) Received: from fe-emea-10.sun.com (gmp-eb-lb-2-fe2.eu.sun.com [192.18.6.11]) by gmp-eb-inf-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id m1SCwFZn005940 for ; Thu, 28 Feb 2008 12:58:15 +0000 (GMT) Received: from conversion-daemon.fe-emea-10.sun.com by fe-emea-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0JWY007019BJ2K00@fe-emea-10.sun.com> (original mail from Darren.Moffat@Sun.COM) for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 28 Feb 2008 12:58:15 +0000 (GMT) Received: from [129.156.173.199] by fe-emea-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0JWY00BIM9CK8410@fe-emea-10.sun.com>; Thu, 28 Feb 2008 12:57:56 +0000 (GMT) Date: Thu, 28 Feb 2008 12:57:56 +0000 From: Darren J Moffat Subject: Re: Integrate fping into Solaris [PSARC/2008/160 FastTrack timeout 03/05/2008] In-reply-to: <18374.43247.34045.323604@gargle.gargle.HOWL> Sender: Darren.Moffat@sun.com To: James Carlson Cc: Nicolas.Williams@sun.com, PSARC-ext@sun.com, Daniel Hain , Scott Rotondo Message-id: <47C6AFD4.30106@Sun.COM> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 References: <200802272313.m1RNDTMk009498@sac.sfbay.sun.com> <47C61141.2020001@sun.com> <20080228050920.GO21674@Sun.COM> <18374.43247.34045.323604@gargle.gargle.HOWL> User-Agent: Thunderbird 2.0.0.9 (X11/20080116) Content-Length: 1213 Status: RO X-Status: $$$$ X-UID: 0000000020 James Carlson wrote: > Nicolas Williams writes: >> On Wed, Feb 27, 2008 at 05:41:21PM -0800, Scott Rotondo wrote: >>> 2. If the program is only usable by a privileged user, might it belong >>> in /usr/sbin instead of /usr/bin? >> OT (Reply-To set): > > But ignored. ;-} > >> Waaa. I hope the ARC gets around to setting a precedent for placing >> low-risk in /usr/bin instead of /usr/sbin. > > We have a precedent. Things that are useful only for the system > administrator go in /usr/sbin. Things that are useful for regular > users go in /usr/bin. > > That precedent is documented on the filesystem(5) man page. > > It has nothing to do with privilege or risk. The only question to > answer here (for this issue) is whether fping is useful for ordinary > users. If it's not, then /usr/sbin would be the right answer. > > As for the privilege check, the reason the code does this is not that > what it's doing requires special privilege (though it does). The > reason is that the utility itself is mostly evil. Most users > generally don't want people scanning subnets at high rates, looking > for hosts to attack. We already have /usr/bin/nmap (not installed setuid though). -- Darren J Moffat From Glenn.Brunette@sun.com Thu Feb 28 05:05:54 2008 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1SD5rmQ002251 for ; Thu, 28 Feb 2008 05:05:54 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id m1SD5poL003922 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Thu, 28 Feb 2008 21:05:52 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JWY00J0F9PSVO00@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 28 Feb 2008 05:05:52 -0800 (PST) Received: from brmea-mail-2.sun.com ([192.18.98.43]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JWY003AA9POBXF0@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 28 Feb 2008 05:05:48 -0800 (PST) Received: from fe-amer-10.sun.com ([192.18.109.80]) by brmea-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id m1SD5mJl014427 for ; Thu, 28 Feb 2008 13:05:48 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0JWY00F019OEHI00@mail-amer.sun.com> (original mail from Glenn.Brunette@Sun.COM) for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 28 Feb 2008 06:05:48 -0700 (MST) Received: from orion.local ([72.255.23.63]) by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0JWY00K5C9P4TF70@mail-amer.sun.com>; Thu, 28 Feb 2008 06:05:29 -0700 (MST) Date: Thu, 28 Feb 2008 08:05:28 -0500 From: Glenn Brunette Subject: Re: Integrate fping into Solaris [PSARC/2008/160 FastTrack timeout 03/05/2008] In-reply-to: <18374.43247.34045.323604@gargle.gargle.HOWL> Sender: Glenn.Brunette@sun.com To: James Carlson Cc: Nicolas.Williams@sun.com, Scott Rotondo , PSARC-ext@sun.com, Daniel Hain Message-id: <47C6B198.5030201@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 References: <200802272313.m1RNDTMk009498@sac.sfbay.sun.com> <47C61141.2020001@sun.com> <20080228050920.GO21674@Sun.COM> <18374.43247.34045.323604@gargle.gargle.HOWL> User-Agent: Thunderbird 2.0.0.9 (Macintosh/20071031) Content-Length: 1721 Status: RO X-Status: $$$$ X-UID: 0000000021 James Carlson wrote: > As for the privilege check, the reason the code does this is not that > what it's doing requires special privilege (though it does). The > reason is that the utility itself is mostly evil. Most users > generally don't want people scanning subnets at high rates, looking > for hosts to attack. > This is really a non-issue for me. If you want people scanning subnets at high rates, just split your list into chunks and run multiple pings on a Niagara 2 :-) Seriously, we must also consider that we have this functionality already in Solaris in the form of nmap (see: -sP) so I do not see adding fping as all that controversial in this sense. nmap can scan hosts, networks and can read targets from a file. > The code has checks on the options to try to stop "mortals" from > abusing the utility, but I think it's a fair question to ask whether > 'we' (collectively) want this at all -- particularly as a bundled part > of the system delivering from SFW. > > And I'm not sure this is a fast-track. It doesn't seem entirely > obvious or non-controversial to me .. I have been an user of fping for years and I know others in the old SunPS security team were in the same boat. It is useful for legitimate purposes and functionality like this would be great in Solaris - although with nmap already integrated its value is lessened. The biggest difference from my standpoint is that the nmap output is not as scriptable (nmap's 'grep' output format is the closest fit but would require some additional parsing to get what you want). This alone may be worth adding fping or adding fping functionality to ping. Just wanted to throw in my $0.02 (for what that's worth these days) ;-) g From carlsonj@phorcys.east.sun.com Thu Feb 28 05:28:00 2008 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1SDRxjs002461 for ; Thu, 28 Feb 2008 05:27:59 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m1SDRndS017918; Thu, 28 Feb 2008 13:27:55 GMT Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JWY00J03AQH6A00@nwk-avmta-1.sfbay.Sun.COM>; Thu, 28 Feb 2008 05:27:53 -0800 (PST) Received: from phorcys.east.sun.com ([129.148.174.143]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JWY007A4AQGUWE0@nwk-avmta-1.sfbay.Sun.COM>; Thu, 28 Feb 2008 05:27:53 -0800 (PST) Received: from phorcys.east.sun.com (localhost [127.0.0.1]) by phorcys.east.sun.com (8.14.2+Sun/8.14.2) with ESMTP id m1SDRp2Y025989; Thu, 28 Feb 2008 08:27:51 -0500 (EST) Received: (from carlsonj@localhost) by phorcys.east.sun.com (8.14.2+Sun/8.14.2/Submit) id m1SDRplS025986; Thu, 28 Feb 2008 08:27:51 -0500 (EST) Date: Thu, 28 Feb 2008 08:27:51 -0500 From: James Carlson Subject: Re: Integrate fping into Solaris [PSARC/2008/160 FastTrack timeout 03/05/2008] In-reply-to: <47C6B198.5030201@sun.com> To: Glenn Brunette Cc: Nicolas.Williams@sun.com, Scott Rotondo , PSARC-ext@sun.com, Daniel Hain Message-id: <18374.46807.576005.103102@gargle.gargle.HOWL> MIME-version: 1.0 X-Mailer: VM 7.01 under Emacs 21.3.1 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 References: <200802272313.m1RNDTMk009498@sac.sfbay.sun.com> <47C61141.2020001@sun.com> <20080228050920.GO21674@Sun.COM> <18374.43247.34045.323604@gargle.gargle.HOWL> <47C6B198.5030201@sun.com> Content-Length: 843 Status: RO X-Status: $$$$ X-UID: 0000000022 Glenn Brunette writes: > James Carlson wrote: > > As for the privilege check, the reason the code does this is not that > > what it's doing requires special privilege (though it does). The > > reason is that the utility itself is mostly evil. Most users > > generally don't want people scanning subnets at high rates, looking > > for hosts to attack. > > > > This is really a non-issue for me. If you want people scanning subnets > at high > rates, just split your list into chunks and run multiple pings on a > Niagara 2 :-) Right; I wasn't trying to defend the choice, just explain why that check is there. -- James Carlson, Solaris Networking Sun Microsystems / 35 Network Drive 71.232W Vox +1 781 442 2084 MS UBUR02-212 / Burlington MA 01803-2757 42.496N Fax +1 781 442 1677 From Darren.Moffat@sun.com Thu Feb 28 05:36:26 2008 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1SDaPMb002539 for ; Thu, 28 Feb 2008 05:36:26 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m1SDaJvu021913 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Thu, 28 Feb 2008 13:36:25 GMT Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JWY00705B4OBO00@brm-avmta-1.central.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 28 Feb 2008 06:36:24 -0700 (MST) Received: from gmp-eb-mail-2.sun.com ([192.18.6.24]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JWY00A83B4NR0D0@brm-avmta-1.central.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 28 Feb 2008 06:36:24 -0700 (MST) Received: from fe-emea-09.sun.com (gmp-eb-lb-2-fe3.eu.sun.com [192.18.6.12]) by gmp-eb-mail-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id m1SDaMiS004453 for ; Thu, 28 Feb 2008 13:36:22 +0000 (GMT) Received: from conversion-daemon.fe-emea-09.sun.com by fe-emea-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0JWY00901ALPZV00@fe-emea-09.sun.com> (original mail from Darren.Moffat@Sun.COM) for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 28 Feb 2008 13:36:22 +0000 (GMT) Received: from [129.156.173.199] by fe-emea-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0JWY000KLB4DGC10@fe-emea-09.sun.com>; Thu, 28 Feb 2008 13:36:14 +0000 (GMT) Date: Thu, 28 Feb 2008 13:36:13 +0000 From: Darren J Moffat Subject: Re: Integrate fping into Solaris [PSARC/2008/160 FastTrack timeout 03/05/2008] In-reply-to: <47C6B198.5030201@sun.com> Sender: Darren.Moffat@sun.com To: Glenn Brunette Cc: James Carlson , Nicolas.Williams@sun.com, Scott Rotondo , PSARC-ext@sun.com, Daniel Hain Message-id: <47C6B8CD.2060600@Sun.COM> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 References: <200802272313.m1RNDTMk009498@sac.sfbay.sun.com> <47C61141.2020001@sun.com> <20080228050920.GO21674@Sun.COM> <18374.43247.34045.323604@gargle.gargle.HOWL> <47C6B198.5030201@sun.com> User-Agent: Thunderbird 2.0.0.9 (X11/20080116) Content-Length: 301 Status: RO X-Status: $$$$ X-UID: 0000000023 I don't believe anyone has an issue with the functionality this provides more with the need for it to be installed setuid given that it isn't privileges(5) bracketed like the existing /usr/sbin/ping. Yes nmap isn't privileges(5) bracketed either but it isn't installed setuid. -- Darren J Moffat From carlsonj@phorcys.east.sun.com Thu Feb 28 05:39:33 2008 Received: from sunmail2sca.sfbay.sun.com (sunmail2sca [129.145.155.234]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1SDdXfp002585 for ; Thu, 28 Feb 2008 05:39:33 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail2sca.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m1SDdWak029944; Thu, 28 Feb 2008 05:39:32 -0800 (PST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JWY00701B9VIO00@brm-avmta-1.central.sun.com>; Thu, 28 Feb 2008 06:39:31 -0700 (MST) Received: from phorcys.east.sun.com ([129.148.174.143]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JWY00AFKB9SR3D0@brm-avmta-1.central.sun.com>; Thu, 28 Feb 2008 06:39:28 -0700 (MST) Received: from phorcys.east.sun.com (localhost [127.0.0.1]) by phorcys.east.sun.com (8.14.2+Sun/8.14.2) with ESMTP id m1SDVvuj026010; Thu, 28 Feb 2008 08:31:57 -0500 (EST) Received: (from carlsonj@localhost) by phorcys.east.sun.com (8.14.2+Sun/8.14.2/Submit) id m1SDVtBn026007; Thu, 28 Feb 2008 08:31:55 -0500 (EST) Date: Thu, 28 Feb 2008 08:31:55 -0500 From: James Carlson Subject: Re: Integrate fping into Solaris [PSARC/2008/160 FastTrack timeout 03/05/2008] In-reply-to: To: Cyril Plisko Cc: Nicolas.Williams@sun.com, PSARC-ext@sun.com, Daniel Hain , Scott Rotondo Message-id: <18374.47051.580934.693090@gargle.gargle.HOWL> MIME-version: 1.0 X-Mailer: VM 7.01 under Emacs 21.3.1 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 References: <200802272313.m1RNDTMk009498@sac.sfbay.sun.com> <47C61141.2020001@sun.com> <20080228050920.GO21674@Sun.COM> <18374.43247.34045.323604@gargle.gargle.HOWL> Content-Length: 1458 Status: RO X-Status: $$$$ X-UID: 0000000024 Cyril Plisko writes: > On Thu, Feb 28, 2008 at 2:28 PM, James Carlson wrote: > > It has nothing to do with privilege or risk. The only question to > > answer here (for this issue) is whether fping is useful for ordinary > > users. If it's not, then /usr/sbin would be the right answer. > > > > What criteria are used to determine whether a particular utility > is useful for ordinary user ? Well, for instance, there's not much that an ordinary user ought to be doing with zonecfg or devfsadm. > I consider myself an ordinary user and I cannot imaging working > w/o /usr/sbin in my path - I must be missing something obvious here... If what you're saying is that we sometimes get the choice wrong, then I agree. If you're saying that the choice can be pretty unclear in some instances, I'd also agree. If you're saying that the choice is probably a bogus issue and folding it all in /usr/bin would be simpler answer for the long term, I'd probably agree with that as well. However, the previous poster was asserting that there's no precedent here, or at least that the ARC needs to set precedent, and that's incorrect. There's clear precedent -- whether we choose to follow it correctly or not. -- James Carlson, Solaris Networking Sun Microsystems / 35 Network Drive 71.232W Vox +1 781 442 2084 MS UBUR02-212 / Burlington MA 01803-2757 42.496N Fax +1 781 442 1677 From carlsonj@phorcys.east.sun.com Thu Feb 28 05:57:04 2008 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1SDv3sq003103 for ; Thu, 28 Feb 2008 05:57:03 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id m1SDuRND023669; Thu, 28 Feb 2008 21:56:56 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JWY00M0JC2RAV00@nwk-avmta-1.sfbay.Sun.COM>; Thu, 28 Feb 2008 05:56:52 -0800 (PST) Received: from phorcys.east.sun.com ([129.148.174.143]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JWY00JN6C2QW910@nwk-avmta-1.sfbay.Sun.COM>; Thu, 28 Feb 2008 05:56:51 -0800 (PST) Received: from phorcys.east.sun.com (localhost [127.0.0.1]) by phorcys.east.sun.com (8.14.2+Sun/8.14.2) with ESMTP id m1SDuo5h026120; Thu, 28 Feb 2008 08:56:50 -0500 (EST) Received: (from carlsonj@localhost) by phorcys.east.sun.com (8.14.2+Sun/8.14.2/Submit) id m1SDunj0026117; Thu, 28 Feb 2008 08:56:49 -0500 (EST) Date: Thu, 28 Feb 2008 08:56:49 -0500 From: James Carlson Subject: Re: Integrate fping into Solaris [PSARC/2008/160 FastTrack timeout 03/05/2008] In-reply-to: <47C6B8CD.2060600@Sun.COM> To: Darren J Moffat Cc: Glenn Brunette , Scott Rotondo , PSARC-ext@sun.com, Daniel Hain Message-id: <18374.48545.914015.94700@gargle.gargle.HOWL> MIME-version: 1.0 X-Mailer: VM 7.01 under Emacs 21.3.1 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 References: <200802272313.m1RNDTMk009498@sac.sfbay.sun.com> <47C61141.2020001@sun.com> <20080228050920.GO21674@Sun.COM> <18374.43247.34045.323604@gargle.gargle.HOWL> <47C6B198.5030201@sun.com> <47C6B8CD.2060600@Sun.COM> Content-Length: 859 Status: RO X-Status: $$$$ X-UID: 0000000025 Darren J Moffat writes: > I don't believe anyone has an issue with the functionality this provides > more with the need for it to be installed setuid given that it isn't > privileges(5) bracketed like the existing /usr/sbin/ping. Yes nmap > isn't privileges(5) bracketed either but it isn't installed setuid. That's ok. Neither is this installed setuid -- the submitter previously clarified by saying that the invoker must be root with privileges sufficient to open the raw socket. (Yes, the man page says that you can install either way, and, yes, this ought to be clarified that it's installed without setuid on OpenSolaris.) -- James Carlson, Solaris Networking Sun Microsystems / 35 Network Drive 71.232W Vox +1 781 442 2084 MS UBUR02-212 / Burlington MA 01803-2757 42.496N Fax +1 781 442 1677 From Nicolas.Williams@sun.com Thu Feb 28 08:13:43 2008 Received: from sunmail2sca.sfbay.sun.com (sunmail2sca [129.145.155.234]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1SGDhi0006649 for ; Thu, 28 Feb 2008 08:13:43 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail2sca.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m1SGDcs9019508; Thu, 28 Feb 2008 08:13:41 -0800 (PST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JWY00B2RIERJU00@nwk-avmta-1.sfbay.Sun.COM>; Thu, 28 Feb 2008 08:13:39 -0800 (PST) Received: from binky.Central.Sun.COM ([129.153.128.104]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JWY00JZBIDFWIA0@nwk-avmta-1.sfbay.Sun.COM>; Thu, 28 Feb 2008 08:12:51 -0800 (PST) Received: from binky.Central.Sun.COM (localhost [127.0.0.1]) by binky.Central.Sun.COM (8.14.1+Sun/8.14.1) with ESMTP id m1SGClhY022692; Thu, 28 Feb 2008 10:12:47 -0600 (CST) Received: (from nw141292@localhost) by binky.Central.Sun.COM (8.14.1+Sun/8.14.1/Submit) id m1SGCldG022691; Thu, 28 Feb 2008 10:12:47 -0600 (CST) Date: Thu, 28 Feb 2008 10:12:47 -0600 From: Nicolas Williams Subject: Re: Integrate fping into Solaris [PSARC/2008/160 FastTrack timeout 03/05/2008] In-reply-to: <18374.43247.34045.323604@gargle.gargle.HOWL> To: James Carlson Cc: Scott Rotondo , PSARC-ext@sun.com, Daniel Hain Mail-followup-to: James Carlson , Scott Rotondo , PSARC-ext@sun.com, Daniel Hain Message-id: <20080228161246.GC21674@Sun.COM> MIME-version: 1.0 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT Content-disposition: inline X-PMX-Version: 5.2.0.264296 References: <200802272313.m1RNDTMk009498@sac.sfbay.sun.com> <47C61141.2020001@sun.com> <20080228050920.GO21674@Sun.COM> <18374.43247.34045.323604@gargle.gargle.HOWL> X-Authentication-warning: binky.Central.Sun.COM: nw141292 set sender to Nicolas.Williams@sun.com using -f User-Agent: Mutt/1.5.7i Content-Length: 1391 Status: RO X-Status: $$$$ X-UID: 0000000026 On Thu, Feb 28, 2008 at 07:28:31AM -0500, James Carlson wrote: > It has nothing to do with privilege or risk. The only question to > answer here (for this issue) is whether fping is useful for ordinary > users. If it's not, then /usr/sbin would be the right answer. Oh hell yes ping and fping are useful to ordinary users. > As for the privilege check, the reason the code does this is not that > what it's doing requires special privilege (though it does). The > reason is that the utility itself is mostly evil. Most users > generally don't want people scanning subnets at high rates, looking > for hosts to attack. I could start many ping processes and get much the same effect, at higher cost. That would be subject to local resource controls. Perhaps raw socket usage should be as well. > The code has checks on the options to try to stop "mortals" from > abusing the utility, but I think it's a fair question to ask whether > 'we' (collectively) want this at all -- particularly as a bundled part > of the system delivering from SFW. I don't think we want that, but at the very least we could make it an RBAC profile/authorization. > And I'm not sure this is a fast-track. It doesn't seem entirely > obvious or non-controversial to me ... fping is certainly useful. The resource issue is not a big deal IMO. Ideally there'd be resource controls at the raw socket level. From Nicolas.Williams@sun.com Thu Feb 28 08:14:49 2008 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1SGEmKZ006665 for ; Thu, 28 Feb 2008 08:14:48 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id m1SGEau7017067; Fri, 29 Feb 2008 00:14:43 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JWY0035PIGIZN00@nwk-avmta-2.sfbay.sun.com>; Thu, 28 Feb 2008 08:14:42 -0800 (PST) Received: from binky.Central.Sun.COM ([129.153.128.104]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JWY001UKIFEZE30@nwk-avmta-2.sfbay.sun.com>; Thu, 28 Feb 2008 08:14:03 -0800 (PST) Received: from binky.Central.Sun.COM (localhost [127.0.0.1]) by binky.Central.Sun.COM (8.14.1+Sun/8.14.1) with ESMTP id m1SGE1Uv022699; Thu, 28 Feb 2008 10:14:01 -0600 (CST) Received: (from nw141292@localhost) by binky.Central.Sun.COM (8.14.1+Sun/8.14.1/Submit) id m1SGE1VK022698; Thu, 28 Feb 2008 10:14:01 -0600 (CST) Date: Thu, 28 Feb 2008 10:14:01 -0600 From: Nicolas Williams Subject: Re: Integrate fping into Solaris [PSARC/2008/160 FastTrack timeout 03/05/2008] In-reply-to: <18374.47051.580934.693090@gargle.gargle.HOWL> To: James Carlson Cc: Cyril Plisko , PSARC-ext@sun.com, Daniel Hain , Scott Rotondo Mail-followup-to: James Carlson , Cyril Plisko , PSARC-ext@sun.com, Daniel Hain , Scott Rotondo Message-id: <20080228161400.GD21674@Sun.COM> MIME-version: 1.0 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT Content-disposition: inline X-PMX-Version: 5.2.0.264296 References: <200802272313.m1RNDTMk009498@sac.sfbay.sun.com> <47C61141.2020001@sun.com> <20080228050920.GO21674@Sun.COM> <18374.43247.34045.323604@gargle.gargle.HOWL> <18374.47051.580934.693090@gargle.gargle.HOWL> X-Authentication-warning: binky.Central.Sun.COM: nw141292 set sender to Nicolas.Williams@sun.com using -f User-Agent: Mutt/1.5.7i Content-Length: 334 Status: RO X-Status: $$$$ X-UID: 0000000027 On Thu, Feb 28, 2008 at 08:31:55AM -0500, James Carlson wrote: > However, the previous poster was asserting that there's no precedent > here, or at least that the ARC needs to set precedent, and that's > incorrect. There's clear precedent -- whether we choose to follow it > correctly or not. And I gladly stand corrected. Thanks! From Sebastien.Roy@sun.com Thu Feb 28 09:03:19 2008 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1SH3IZb008404 for ; Thu, 28 Feb 2008 09:03:19 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id m1SH34EU007762 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Fri, 29 Feb 2008 01:03:17 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JWY00527KPHKH00@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 28 Feb 2008 09:03:17 -0800 (PST) Received: from brmea-mail-3.sun.com ([192.18.98.34]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JWY001WKKPEZG80@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 28 Feb 2008 09:03:15 -0800 (PST) Received: from fe-amer-09.sun.com ([192.18.109.79]) by brmea-mail-3.sun.com (8.13.6+Sun/8.12.9) with ESMTP id m1SH3ERX026492 for ; Thu, 28 Feb 2008 17:03:14 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0JWY00K01II1IS00@mail-amer.sun.com> (original mail from Sebastien.Roy@Sun.COM) for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 28 Feb 2008 10:03:14 -0700 (MST) Received: from [129.148.174.103] by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0JWY00B7JKOM1C70@mail-amer.sun.com>; Thu, 28 Feb 2008 10:02:46 -0700 (MST) Date: Thu, 28 Feb 2008 12:02:46 -0500 From: Sebastien Roy Subject: Re: Integrate fping into Solaris [PSARC/2008/160 FastTrack timeout 03/05/2008] In-reply-to: <47C640D8.1040501@sun.com> Sender: Sebastien.Roy@sun.com To: Dan Hain Cc: PSARC-ext@sun.com, Daniel Hain Message-id: <47C6E936.6000903@sun.com> Organization: Sun Microsystems MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 References: <200802272313.m1RNDTMk009498@sac.sfbay.sun.com> <47C6073D.4010401@sun.com> <47C640D8.1040501@sun.com> User-Agent: Thunderbird 2.0.0.9 (X11/20080115) Content-Length: 1955 Status: RO X-Status: $$$$ X-UID: 0000000028 Dan Hain wrote: > Sebastien Roy wrote: >> seb-1: >> >> "Unlike ping(8) , fping is meant to be used in scripts and its >> output is >> easy to parse." >> >> If it's meant to be used in scripts, then why is the output format >> "Not an Interface"? > Ok, it's an Interface. Should I include sample output from the various > option mixes? I'm not sure how to document the interface. At a minimum, the stability level of the output format should be specified here. If you can also give sample output here, then that's great, but it's more important that the actual format that script writers can depend on be documented in the end-user documentation (i.e., the man page). >> seb-2: >> >> "-d Use DNS to lookup address of return ping packet." >> >> Solaris has a name-service switch which allows the administrator to >> configure a naming service on a system-wide basis, which commonly-used >> APIs like gethostby*() and get*info() functions adhere to. Does fping >> really bypass all of that and use DNS directly? > No, both the "-d" and "-n" options use gethostbyaddr() So the man page is outright wrong. Please fix that. >> seb-3: >> >> The spec states: >> >> "The program uses a raw socket to communicate and requires root >> access >> (geteuid() == 0)." >> >> Yet the man page states: >> >> "-f Read list of system from a file. This option can only be >> used by >> the root user. Regular users should pipe in the file via >> stdin: >> fping < targets_file" >> >> That implies that users other than root can run the command. Which is >> accurate? > > The effective uid must be root to run the program. In addition, if the > "-f" flag is specified, you really have to be root. This issue seems to have spawned questions from others, so I'll let you drive the issue to completion in those sub-threads. I have similar concerns to those mentioned by others. Thanks, -Seb From dan.hain@sun.com Thu Feb 28 09:25:40 2008 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1SHPdFD008982 for ; Thu, 28 Feb 2008 09:25:39 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id m1SHPc6O016988 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Fri, 29 Feb 2008 01:25:38 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JWY00I09LQOB800@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 28 Feb 2008 09:25:36 -0800 (PST) Received: from sca-es-mail-2.sun.com ([192.18.43.133]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JWY00E51LQNOC20@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 28 Feb 2008 09:25:35 -0800 (PST) Received: from fe-sfbay-09.sun.com ([192.18.43.129]) by sca-es-mail-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id m1SHPZ5r004779 for ; Thu, 28 Feb 2008 09:25:35 -0800 (PST) Received: from conversion-daemon.fe-sfbay-09.sun.com by fe-sfbay-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0JWY00D01LPX2300@fe-sfbay-09.sun.com> (original mail from dan.hain@sun.com) for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 28 Feb 2008 09:25:35 -0800 (PST) Received: from [192.168.0.4] ([72.197.213.236]) by fe-sfbay-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0JWY003SMLQNBB30@fe-sfbay-09.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 28 Feb 2008 09:25:35 -0800 (PST) Date: Thu, 28 Feb 2008 09:25:33 -0800 From: Dan Hain Subject: Re: Integrate fping into Solaris [PSARC/2008/160 FastTrack timeout 03/05/2008] In-reply-to: <47C672A1.9050506@sun.com> Sender: Daniel.Hain@sun.com Cc: PSARC-ext@sun.com Reply-to: dan.hain@sun.com Message-id: <47C6EE8D.9090502@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 References: <200802272313.m1RNDTMk009498@sac.sfbay.sun.com> <47C6073D.4010401@sun.com> <47C640D8.1040501@sun.com> <47C672A1.9050506@sun.com> User-Agent: Thunderbird 2.0.0.4 (X11/20070723) Content-Length: 893 Status: RO X-Status: $$$$ X-UID: 0000000029 Scott Rotondo wrote: > Dan Hain wrote: > >> >> The effective uid must be root to run the program. In addition, if >> the "-f" flag is specified, you really have to be root. > > The code must change so that effective uid 0 is not required. Ok. > > BTW, what is special about the -f option that requires root? Absolutely nothing. -- Dan Hain Solaris Revenue Product Engineering (RPE) From dan.hain@sun.com Thu Feb 28 10:00:21 2008 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1SI0Lh4010845 for ; Thu, 28 Feb 2008 10:00:21 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m1SI0IcW040259 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Thu, 28 Feb 2008 11:00:20 -0700 (MST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JWY00L05NCJLM00@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 28 Feb 2008 10:00:19 -0800 (PST) Received: from sca-es-mail-1.sun.com ([192.18.43.132]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JWY00EUVNCIOI50@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 28 Feb 2008 10:00:19 -0800 (PST) Received: from fe-sfbay-09.sun.com ([192.18.43.129]) by sca-es-mail-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id m1SI0IXD002112 for ; Thu, 28 Feb 2008 10:00:18 -0800 (PST) Received: from conversion-daemon.fe-sfbay-09.sun.com by fe-sfbay-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0JWY00L01NB8B500@fe-sfbay-09.sun.com> (original mail from dan.hain@sun.com) for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 28 Feb 2008 10:00:18 -0800 (PST) Received: from [192.168.0.4] ([72.197.213.236]) by fe-sfbay-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0JWY00292NC75K70@fe-sfbay-09.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 28 Feb 2008 10:00:12 -0800 (PST) Date: Thu, 28 Feb 2008 10:00:09 -0800 From: Dan Hain Subject: Re: Integrate fping into Solaris [PSARC/2008/160 FastTrack timeout 03/05/2008] In-reply-to: <200802281049.m1SAnhbk018927@dm-holland-02.uk.sun.com> Sender: Daniel.Hain@sun.com Cc: PSARC-ext@sun.com Reply-to: dan.hain@sun.com Message-id: <47C6F6A9.7050403@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=us-ascii Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 References: <200802272313.m1RNDTMk009498@sac.sfbay.sun.com> <47C6073D.4010401@sun.com> <47C640D8.1040501@sun.com> <200802281049.m1SAnhbk018927@dm-holland-02.uk.sun.com> User-Agent: Thunderbird 2.0.0.4 (X11/20070723) Content-Length: 1596 Status: RO X-Status: $$$$ X-UID: 0000000030 Casper.Dik@Sun.COM wrote: >> The effective uid must be root to run the program. In addition, if the >> "-f" flag is specified, you really have to be root. >> > > > That is incorrect. (At least, it is bad for the program to enforce this; > it MUST just attempt the system calls and have those fail or verify > privileges but that is a relatively poor choice). > All the "-f" protects are the fopen(), fgets(), fclose() for reading the specified file. > > Which privileges does it need for which functions? > 1. geteuid() == 0, open raw socket, then the euid is reset immediately: seteuid( getuid() ) 2. Subsequent parsing of the command line then checks getuid() == 0 if the "-f" option is specified. 3. getuid()==0 is also checked if: interval specified is less than 1 second ("-i" option) per host interval is less than 2 seconds ("-p" option) timeout interval is less than 5 seconds ("-t" option) retry limit is greater than 20 ("-r" option) > Will the program be added to the appropriate RBAC profile? > Yes. -- Dan Hain Solaris Revenue Product Engineering (RPE) From dan.hain@sun.com Thu Feb 28 10:11:36 2008 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1SIBZrq011809 for ; Thu, 28 Feb 2008 10:11:36 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m1SIBAJu001974 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Thu, 28 Feb 2008 18:11:35 GMT Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JWY00M1HNV8I100@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 28 Feb 2008 10:11:32 -0800 (PST) Received: from sca-es-mail-2.sun.com ([192.18.43.133]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JWY00EIHNV7OI60@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 28 Feb 2008 10:11:31 -0800 (PST) Received: from fe-sfbay-09.sun.com ([192.18.43.129]) by sca-es-mail-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id m1SIBVHu011047 for ; Thu, 28 Feb 2008 10:11:31 -0800 (PST) Received: from conversion-daemon.fe-sfbay-09.sun.com by fe-sfbay-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0JWY00L01NB8B500@fe-sfbay-09.sun.com> (original mail from dan.hain@sun.com) for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 28 Feb 2008 10:11:31 -0800 (PST) Received: from [192.168.0.4] ([72.197.213.236]) by fe-sfbay-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0JWY002VRNV05KE0@fe-sfbay-09.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Thu, 28 Feb 2008 10:11:24 -0800 (PST) Date: Thu, 28 Feb 2008 10:11:24 -0800 From: Dan Hain Subject: Re: Integrate fping into Solaris [PSARC/2008/160 FastTrack timeout 03/05/2008] In-reply-to: <47C6E936.6000903@sun.com> Sender: Daniel.Hain@sun.com Cc: psarc-ext@sun.com Reply-to: dan.hain@sun.com Message-id: <47C6F94C.4030108@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 References: <200802272313.m1RNDTMk009498@sac.sfbay.sun.com> <47C6073D.4010401@sun.com> <47C640D8.1040501@sun.com> <47C6E936.6000903@sun.com> User-Agent: Thunderbird 2.0.0.4 (X11/20070723) Content-Length: 1908 Status: RO X-Status: $$$$ X-UID: 0000000031 Sebastien Roy wrote: > Dan Hain wrote: >> Sebastien Roy wrote: >>> seb-1: >>> >>> "Unlike ping(8) , fping is meant to be used in scripts and its >>> output is >>> easy to parse." >>> >>> If it's meant to be used in scripts, then why is the output format >>> "Not an Interface"? >> Ok, it's an Interface. Should I include sample output from the >> various option mixes? I'm not sure how to document the interface. > > At a minimum, the stability level of the output format should be > specified here. If you can also give sample output here, then that's > great, but it's more important that the actual format that script > writers can depend on be documented in the end-user documentation > (i.e., the man page). > >>> seb-2: >>> >>> "-d Use DNS to lookup address of return ping packet." >>> >>> Solaris has a name-service switch which allows the administrator to >>> configure a naming service on a system-wide basis, which >>> commonly-used APIs like gethostby*() and get*info() functions adhere >>> to. Does fping really bypass all of that and use DNS directly? >> No, both the "-d" and "-n" options use gethostbyaddr() > > So the man page is outright wrong. Please fix that. The man page appears to require substantial rework to correct issues and add example outputs. I'll start working on those. Thanks, -- Dan Hain Solaris Revenue Product Engineering (RPE) From Darren.Moffat@sun.com Thu Feb 28 10:17:00 2008 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1SIGxOv012701 for ; Thu, 28 Feb 2008 10:17:00 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m1SIGbk8004546 for <@sunmail2sca.sfbay.sun.com:psarc-ext@sun.com>; Thu, 28 Feb 2008 18:16:59 GMT Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JWY00N0TO470M00@nwk-avmta-1.sfbay.Sun.COM> for psarc-ext@sun.com (ORCPT psarc-ext@Sun.COM); Thu, 28 Feb 2008 10:16:55 -0800 (PST) Received: from gmp-eb-inf-1.sun.com ([192.18.6.21]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JWY00EV7O46OA60@nwk-avmta-1.sfbay.Sun.COM> for psarc-ext@sun.com (ORCPT psarc-ext@Sun.COM); Thu, 28 Feb 2008 10:16:55 -0800 (PST) Received: from fe-emea-09.sun.com (gmp-eb-lb-2-fe1.eu.sun.com [192.18.6.10]) by gmp-eb-inf-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id m1SIGsCb017695 for ; Thu, 28 Feb 2008 18:16:54 +0000 (GMT) Received: from conversion-daemon.fe-emea-09.sun.com by fe-emea-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0JWY00J01O29SI00@fe-emea-09.sun.com> (original mail from Darren.Moffat@Sun.COM) for psarc-ext@Sun.COM (ORCPT psarc-ext@Sun.COM); Thu, 28 Feb 2008 18:16:54 +0000 (GMT) Received: from [129.156.173.199] by fe-emea-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0JWY000KZO44GC20@fe-emea-09.sun.com> for psarc-ext@Sun.COM (ORCPT psarc-ext@Sun.COM); Thu, 28 Feb 2008 18:16:53 +0000 (GMT) Date: Thu, 28 Feb 2008 18:16:52 +0000 From: Darren J Moffat Subject: Re: Integrate fping into Solaris [PSARC/2008/160 FastTrack timeout 03/05/2008] In-reply-to: <47C6F6A9.7050403@sun.com> Sender: Darren.Moffat@sun.com To: dan.hain@sun.com Cc: psarc-ext@sun.com Message-id: <47C6FA94.4080405@Sun.COM> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 References: <200802272313.m1RNDTMk009498@sac.sfbay.sun.com> <47C6073D.4010401@sun.com> <47C640D8.1040501@sun.com> <200802281049.m1SAnhbk018927@dm-holland-02.uk.sun.com> <47C6F6A9.7050403@sun.com> User-Agent: Thunderbird 2.0.0.9 (X11/20080116) Content-Length: 1409 Status: RO X-Status: $$$$ X-UID: 0000000032 Dan Hain wrote: > Casper.Dik@Sun.COM wrote: >>> The effective uid must be root to run the program. In addition, if the >>> "-f" flag is specified, you really have to be root. >>> >> >> That is incorrect. (At least, it is bad for the program to enforce this; >> it MUST just attempt the system calls and have those fail or verify >> privileges but that is a relatively poor choice). >> > All the "-f" protects are the fopen(), fgets(), fclose() for reading the > specified file. >> Which privileges does it need for which functions? >> > 1. geteuid() == 0, open raw socket, then the euid is reset immediately: > seteuid( getuid() ) net_icmpaccess or net_rawaccess is what is really needed now. In fact one could have euid == 0 and not those privileges - which is exactly the default case for shared ip stack zones with net_rawaccess. > 2. Subsequent parsing of the command line then checks getuid() == 0 if > the "-f" option is specified. > 3. getuid()==0 is also checked if: > interval specified is less than 1 second ("-i" option) > per host interval is less than 2 seconds ("-p" option) > timeout interval is less than 5 seconds ("-t" option) > retry limit is greater than 20 ("-r" option) All of those are useless and bogus checks. Particularly those in 3 since OpenSolaris has a good resource control framework that much better controls that kind of thing. -- Darren J Moffat From Bart.Blanquart@sun.com Thu Feb 28 10:39:59 2008 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1SIdwib013281 for ; Thu, 28 Feb 2008 10:39:59 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id m1SIdrOZ016556 for <@sunmail2sca.sfbay.sun.com:psarc-ext@sun.com>; Fri, 29 Feb 2008 02:39:57 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JWY0020TP6I3V00@nwk-avmta-1.sfbay.Sun.COM> for psarc-ext@sun.com (ORCPT psarc-ext@sun.com); Thu, 28 Feb 2008 10:39:54 -0800 (PST) Received: from gmp-eb-mail-2.sun.com ([192.18.6.24]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JWY00EECP6GOA80@nwk-avmta-1.sfbay.Sun.COM> for psarc-ext@sun.com (ORCPT psarc-ext@sun.com); Thu, 28 Feb 2008 10:39:53 -0800 (PST) Received: from fe-emea-09.sun.com (gmp-eb-lb-2-fe1.eu.sun.com [192.18.6.10]) by gmp-eb-mail-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id m1SIdqJF009557 for ; Thu, 28 Feb 2008 18:39:52 +0000 (GMT) Received: from conversion-daemon.fe-emea-09.sun.com by fe-emea-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0JWY00H01P3QS400@fe-emea-09.sun.com> (original mail from Bart.Blanquart@Sun.COM) for psarc-ext@sun.com (ORCPT psarc-ext@sun.com); Thu, 28 Feb 2008 18:39:52 +0000 (GMT) Received: from [172.20.191.160] ([80.36.25.74]) by fe-emea-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0JWY00ABNP6FI820@fe-emea-09.sun.com> for psarc-ext@sun.com (ORCPT psarc-ext@sun.com); Thu, 28 Feb 2008 18:39:52 +0000 (GMT) Date: Thu, 28 Feb 2008 19:39:50 +0100 From: Bart Blanquart Subject: Re: Integrate fping into Solaris [PSARC/2008/160 FastTrack timeout 03/05/2008] In-reply-to: <47C6F6A9.7050403@sun.com> Sender: Bart.Blanquart@sun.com To: dan.hain@sun.com Cc: psarc-ext@sun.com Message-id: <28813910-399C-41FE-B935-455BE139CCCD@Sun.COM> MIME-version: 1.0 X-Mailer: Apple Mail (2.753) Content-type: text/plain; format=flowed; delsp=yes; charset=US-ASCII Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 References: <200802272313.m1RNDTMk009498@sac.sfbay.sun.com> <47C6073D.4010401@sun.com> <47C640D8.1040501@sun.com> <200802281049.m1SAnhbk018927@dm-holland-02.uk.sun.com> <47C6F6A9.7050403@sun.com> Content-Length: 1363 Status: RO X-Status: $$$$ X-UID: 0000000033 On 28 Feb 2008, at 19:00, Dan Hain wrote: > Casper.Dik@Sun.COM wrote: >>> The effective uid must be root to run the program. In addition, >>> if the "-f" flag is specified, you really have to be root. >> That is incorrect. (At least, it is bad for the program to >> enforce this; >> it MUST just attempt the system calls and have those fail or >> verify privileges but that is a relatively poor choice). >> > All the "-f" protects are the fopen(), fgets(), fclose() for > reading the specified file. >> >> Which privileges does it need for which functions? >> > 1. geteuid() == 0, open raw socket, then the euid is reset > immediately: seteuid( getuid() ) It should just try opening the raw socket. The uid itself does not indicate if opening the socket will succeed (or if it is allowed), the privileges the process has determine that. > 2. Subsequent parsing of the command line then checks getuid() == 0 > if the "-f" option is specified. > 3. getuid()==0 is also checked if: > interval specified is less than 1 second ("-i" option) > per host interval is less than 2 seconds ("-p" option) > timeout interval is less than 5 seconds ("-t" option) > retry limit is greater than 20 ("-r" option) These sound as though, if they're needed at all, they should be replaced with one or more authorization checks. (cf. chkauthattr(3SECDB)) Bart From jek3@sun.com Thu Feb 28 10:45:04 2008 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1SIj35E013429 for ; Thu, 28 Feb 2008 10:45:04 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id m1SIitBC018180; Fri, 29 Feb 2008 02:44:59 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JWY00203PEXKG00@nwk-avmta-1.sfbay.Sun.COM>; Thu, 28 Feb 2008 10:44:57 -0800 (PST) Received: from jurassic-x4600.sfbay.sun.com ([129.146.17.59]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JWY00EJVPEWO870@nwk-avmta-1.sfbay.Sun.COM>; Thu, 28 Feb 2008 10:44:57 -0800 (PST) Received: from [129.150.12.37] (vpn-129-150-12-37.SFBay.Sun.COM [129.150.12.37]) by jurassic-x4600.sfbay.sun.com (8.14.2+Sun/8.14.2) with ESMTP id m1SIito9008466; Thu, 28 Feb 2008 10:44:56 -0800 (PST) Date: Thu, 28 Feb 2008 08:42:52 -1000 From: Joseph Kowalski Subject: Re: Integrate fping into Solaris [PSARC/2008/160 FastTrack timeout 03/05/2008] In-reply-to: <47C640D8.1040501@sun.com> To: Dan Hain Cc: Sebastien Roy , Daniel Hain , PSARC-ext@sun.com Message-id: <47C700AC.4000806@sun.com> MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 References: <200802272313.m1RNDTMk009498@sac.sfbay.sun.com> <47C6073D.4010401@sun.com> <47C640D8.1040501@sun.com> User-Agent: Thunderbird 2.0.0.6 (X11/20071119) Content-Length: 498 Status: RO X-Status: $$$$ X-UID: 0000000034 Dan Hain wrote: > Sebastien Roy wrote: >> A couple of comments regarding the man page: >> >> seb-1: >> >> "Unlike ping(8) , fping is meant to be used in scripts and its >> output is >> easy to parse." >> >> If it's meant to be used in scripts, then why is the output format >> "Not an Interface"? > Ok, it's an Interface. Should I include sample output from the > various option mixes? I'm not sure how to document the interface. Token by token. See ls(1). Yea, its work. - jek3 From Sebastien.Roy@sun.com Thu Feb 28 10:56:24 2008 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m1SIuN7V013912 for ; Thu, 28 Feb 2008 10:56:23 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id m1SIuKXo022914 for <@sunmail2sca.sfbay.sun.com:psarc-ext@sun.com>; Fri, 29 Feb 2008 02:56:22 +0800 (SGT) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JWY00801PXW1U00@brm-avmta-1.central.sun.com> for psarc-ext@sun.com (ORCPT psarc-ext@Sun.COM); Thu, 28 Feb 2008 11:56:20 -0700 (MST) Received: from brmea-mail-1.sun.com ([192.18.98.31]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JWY00I0RPXVR9D0@brm-avmta-1.central.sun.com> for psarc-ext@sun.com (ORCPT psarc-ext@Sun.COM); Thu, 28 Feb 2008 11:56:19 -0700 (MST) Received: from fe-amer-09.sun.com ([192.18.109.79]) by brmea-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id m1SIuJZN003659 for ; Thu, 28 Feb 2008 18:56:19 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0JWY00M01OFTXZ00@mail-amer.sun.com> (original mail from Sebastien.Roy@Sun.COM) for psarc-ext@Sun.COM (ORCPT psarc-ext@Sun.COM); Thu, 28 Feb 2008 11:56:19 -0700 (MST) Received: from [129.148.174.103] by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0JWY0077EPXUU520@mail-amer.sun.com> for psarc-ext@Sun.COM (ORCPT psarc-ext@Sun.COM); Thu, 28 Feb 2008 11:56:18 -0700 (MST) Date: Thu, 28 Feb 2008 13:56:17 -0500 From: Sebastien Roy Subject: Re: Integrate fping into Solaris [PSARC/2008/160 FastTrack timeout 03/05/2008] In-reply-to: <47C6F94C.4030108@sun.com> Sender: Sebastien.Roy@sun.com To: dan.hain@sun.com Cc: PSARC-ext@sun.com Message-id: <47C703D1.6050407@sun.com> Organization: Sun Microsystems MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 References: <200802272313.m1RNDTMk009498@sac.sfbay.sun.com> <47C6073D.4010401@sun.com> <47C640D8.1040501@sun.com> <47C6E936.6000903@sun.com> <47C6F94C.4030108@sun.com> User-Agent: Thunderbird 2.0.0.9 (X11/20080115) Content-Length: 435 Status: RO X-Status: $$$$ X-UID: 0000000035 Dan, Dan Hain wrote: > The man page appears to require substantial rework to correct issues and > add example outputs. I'll start working on those. Great. Are you in a position to feed your contributions back to the author? While that's not exactly an architectural issue, the documentation suggestions made here can be implemented in a platform-neutral fashion, and would thus be beneficial to all fping users. Thanks, -Seb From dan.hain@sun.com Fri Feb 29 16:03:47 2008 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m2103kmT005716 for ; Fri, 29 Feb 2008 16:03:47 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m2103gMn015043 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Sat, 1 Mar 2008 00:03:45 GMT Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JX000D5JYU9A800@brm-avmta-1.central.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Fri, 29 Feb 2008 17:03:45 -0700 (MST) Received: from sca-es-mail-2.sun.com ([192.18.43.133]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JX000AU9YTHIK10@brm-avmta-1.central.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Fri, 29 Feb 2008 17:03:17 -0700 (MST) Received: from fe-sfbay-10.sun.com ([192.18.43.129]) by sca-es-mail-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id m2103G1N015913 for ; Fri, 29 Feb 2008 16:03:16 -0800 (PST) Received: from conversion-daemon.fe-sfbay-10.sun.com by fe-sfbay-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0JX000M01YPGDM00@fe-sfbay-10.sun.com> (original mail from dan.hain@sun.com) for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Fri, 29 Feb 2008 16:03:16 -0800 (PST) Received: from [192.168.0.4] ([72.197.213.236]) by fe-sfbay-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0JX0002KPYTDJWC0@fe-sfbay-10.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Fri, 29 Feb 2008 16:03:13 -0800 (PST) Date: Fri, 29 Feb 2008 16:03:15 -0800 From: Dan Hain Subject: Re: Integrate fping into Solaris [PSARC/2008/160 FastTrack timeout 03/05/2008] In-reply-to: <200802272313.m1RNDTMk009498@sac.sfbay.sun.com> Sender: Daniel.Hain@sun.com To: psarc-ext@sun.com Reply-to: dan.hain@sun.com Message-id: <47C89D43.3030701@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 References: <200802272313.m1RNDTMk009498@sac.sfbay.sun.com> User-Agent: Thunderbird 2.0.0.4 (X11/20070723) Content-Length: 2720 Status: RO X-Status: $$$$ X-UID: 0000000036 I've updated the case directory with a new man page (fping.1m). Following is an updated proposal. Basic change is that all uses of getuid/geteuid/seteuid have been compiled out and 'net_icmpaccess' is now required, and that the target directory for the binary is /usr/sbin. Thanks, Dan Proposal: Integrate fping into Solaris Details: fping is a ping like program which uses the Internet Control Message Protocol (ICMP) echo request to determine if a host is up. fping is different from ping in that you can specify any number of hosts on the command line, or specify a file containing the lists of hosts to ping. Unlike ping, fping is meant to be used in scripts and its output is easy to parse. Instead of trying one host until it timeouts or replies, fping will send out a ping packet and move on to the next host in a round- robin fashion. If a host replies, it is noted and removed from the list of hosts to check. If a host does not respond within a certain time limit and/or retry limit it will be considered unreachable. Fping has been developed and maintained by Roland Schemers, RL "Bob" Morgan, David Papp and Thomas Dzubin - webpage http://fping.sourceforge.net. The current version of fping is 2.4b2_to-ipv6 (01/16/2002). Exported Interfaces: SUNWfping Uncommitted Package name /usr/bin/fping Committed Executable location fping Uncommitted Commandline syntax fping output Uncommitted Doc Impact: New man page: fping.1M (see case directory). This is an enhanced version of the distribution's fping.8 with examples of the output and removal of any setuid references. Security Impact: The original code base used a raw socket to communicate and required root access (geteuid() == 0). This has been modified to call priv_ineffect(PRIV_NET_ICMPACCESS) All uses of geteuid/getuid/seteuid have been compiled out. References: [1] http://fping.sourceforge.net/ - Home page [2] 6636635 Integrate fping-2.4b2_to-ipv6 into Solaris -- Dan Hain Solaris Revenue Product Engineering (RPE) From gww@eng.sun.com Mon Mar 3 11:54:48 2008 Received: from sunmail2sca.sfbay.sun.com (sunmail2sca [129.145.155.234]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m23Jsmqb010007 for ; Mon, 3 Mar 2008 11:54:48 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail2sca.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m23JshBv009999; Mon, 3 Mar 2008 11:54:47 -0800 (PST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JX600C097B8KW00@brm-avmta-1.central.sun.com>; Mon, 03 Mar 2008 12:54:44 -0700 (MST) Received: from dm-eng-02.sfbay.sun.com ([129.146.11.32]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JX60057Z7B8OQ70@brm-avmta-1.central.sun.com>; Mon, 03 Mar 2008 12:54:44 -0700 (MST) Received: from marduk.eng.sun.com (marduk.SFBay.Sun.COM [129.146.108.224]) by dm-eng-02.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m23Jsi96015999; Mon, 03 Mar 2008 11:54:44 -0800 (PST) Received: from marduk.eng.sun.com (localhost [127.0.0.1]) by marduk.eng.sun.com (8.13.6+Sun/8.12.11) with ESMTP id m23JtOMN006404; Mon, 03 Mar 2008 11:55:24 -0800 (PST) Received: (from gww@localhost) by marduk.eng.sun.com (8.13.6+Sun/8.12.11/Submit) id m23JtOiv006403; Mon, 03 Mar 2008 11:55:24 -0800 (PST) Date: Mon, 03 Mar 2008 11:55:24 -0800 (PST) From: Gary Winiger Subject: Re: Integrate fping into Solaris [PSARC/2008/160 FastTrack timeout 03/05/2008] To: dan.hain@sun.com, psarc-ext@sun.com Message-id: <200803031955.m23JtOiv006403@marduk.eng.sun.com> Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 Content-Length: 732 Status: RO X-Status: $$$$ X-UID: 0000000037 > Security Impact: > > The original code base used a raw socket to communicate and > required root > access (geteuid() == 0). This has been modified to call > priv_ineffect(PRIV_NET_ICMPACCESS) > All uses of geteuid/getuid/seteuid have been compiled out. I'm not sure what is being said here. If the code is checking that it inherits net_icmpaccess, it shouldn't. It should just make the system calls. If they fail, give a diagnostic and exit. Gary.. P.S. nit. The updated man page says net_rawaccess. Indeed the whole RESTRICTIONS section should read: Successful execution of this program requires that it be granted the net_icmpaccess privilege. Also add to SEE ALSO rbac(5), privileges(5) From scott.rotondo@sun.com Mon Mar 3 14:27:23 2008 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m23MRMdI017639 for ; Mon, 3 Mar 2008 14:27:22 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id m23MRITB020464; Tue, 4 Mar 2008 06:27:19 +0800 (SGT) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JX600103EDH5S00@brm-avmta-1.central.sun.com>; Mon, 03 Mar 2008 15:27:17 -0700 (MST) Received: from jurassic-x4600.sfbay.sun.com ([129.146.17.59]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JX600JZDEDGUR40@brm-avmta-1.central.sun.com>; Mon, 03 Mar 2008 15:27:17 -0700 (MST) Received: from [129.146.108.62] (vinifera.SFBay.Sun.COM [129.146.108.62]) by jurassic-x4600.sfbay.sun.com (8.14.2+Sun/8.14.2) with ESMTP id m23MRGlO530349; Mon, 03 Mar 2008 14:27:16 -0800 (PST) Date: Mon, 03 Mar 2008 14:27:16 -0800 From: Scott Rotondo Subject: Re: Integrate fping into Solaris [PSARC/2008/160 FastTrack timeout 03/05/2008] In-reply-to: <200803031955.m23JtOiv006403@marduk.eng.sun.com> To: dan.hain@sun.com Cc: psarc-ext@sun.com Message-id: <47CC7B44.5020006@sun.com> MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 References: <200803031955.m23JtOiv006403@marduk.eng.sun.com> User-Agent: Thunderbird 2.0.0.6 (X11/20071119) Content-Length: 761 Status: RO X-Status: $$$$ X-UID: 0000000038 Gary Winiger wrote: >> Security Impact: >> >> The original code base used a raw socket to communicate and >> required root >> access (geteuid() == 0). This has been modified to call >> priv_ineffect(PRIV_NET_ICMPACCESS) >> All uses of geteuid/getuid/seteuid have been compiled out. > > I'm not sure what is being said here. If the code is checking > that it inherits net_icmpaccess, it shouldn't. It should just > make the system calls. If they fail, give a diagnostic and exit. Indeed. Sorry if my previous comment was unclear on this point. The man page should document the required privileges, but the code should just assume it has the necessary privileges, make the system calls, and report the errors that occur. Scott From dan.hain@sun.com Mon Mar 3 14:39:25 2008 Received: from sunmail2sca.sfbay.sun.com (sunmail2sca [129.145.155.234]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m23MdP5i018359 for ; Mon, 3 Mar 2008 14:39:25 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail2sca.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m23MdPPE021831 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Mon, 3 Mar 2008 14:39:25 -0800 (PST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JX600203EXO0600@brm-avmta-1.central.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Mon, 03 Mar 2008 15:39:24 -0700 (MST) Received: from sca-es-mail-2.sun.com ([192.18.43.133]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JX600JWAEXOUQ30@brm-avmta-1.central.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Mon, 03 Mar 2008 15:39:24 -0700 (MST) Received: from fe-sfbay-09.sun.com ([192.18.43.129]) by sca-es-mail-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id m23MdOMo013778 for ; Mon, 03 Mar 2008 14:39:24 -0800 (PST) Received: from conversion-daemon.fe-sfbay-09.sun.com by fe-sfbay-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0JX600E01EP9NH00@fe-sfbay-09.sun.com> (original mail from dan.hain@sun.com) for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Mon, 03 Mar 2008 14:39:24 -0800 (PST) Received: from [129.153.85.8] by fe-sfbay-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0JX600LITEXHEY80@fe-sfbay-09.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Mon, 03 Mar 2008 14:39:17 -0800 (PST) Date: Mon, 03 Mar 2008 14:39:13 -0800 From: Dan Hain Subject: Re: Integrate fping into Solaris [PSARC/2008/160 FastTrack timeout 03/05/2008] In-reply-to: <47CC7B44.5020006@sun.com> Sender: Daniel.Hain@sun.com Cc: psarc-ext@sun.com Reply-to: dan.hain@sun.com Message-id: <47CC7E11.9040203@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 References: <200803031955.m23JtOiv006403@marduk.eng.sun.com> <47CC7B44.5020006@sun.com> User-Agent: Thunderbird 2.0.0.12pre (X11/20071231) Content-Length: 1610 Status: RO X-Status: $$$$ X-UID: 0000000039 Scott Rotondo wrote: > Gary Winiger wrote: >>> Security Impact: >>> >>> The original code base used a raw socket to communicate and >>> required root >>> access (geteuid() == 0). This has been modified to call >>> priv_ineffect(PRIV_NET_ICMPACCESS) >>> All uses of geteuid/getuid/seteuid have been compiled out. >> >> I'm not sure what is being said here. If the code is checking >> that it inherits net_icmpaccess, it shouldn't. It should just >> make the system calls. If they fail, give a diagnostic and exit. > > Indeed. Sorry if my previous comment was unclear on this point. > > The man page should document the required privileges, but the code > should just assume it has the necessary privileges, make the system > calls, and report the errors that occur. > > Scott My misunderstanding, thank you for clarifying that. The check has been removed, and operation verified. I've updated the proposal to identify that net_icmpaccess is required, and the man page has been updated. Thanks! -- Dan Hain Solaris Revenue Product Engineering (RPE) From gww@eng.sun.com Mon Mar 3 15:01:09 2008 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m23N18ku019102 for ; Mon, 3 Mar 2008 15:01:08 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id m23N11G2002861; Tue, 4 Mar 2008 07:01:05 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JX60054XFXQS500@nwk-avmta-2.sfbay.sun.com>; Mon, 03 Mar 2008 15:01:02 -0800 (PST) Received: from dm-eng-02.sfbay.sun.com ([129.146.11.32]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JX60002WFXE1Y70@nwk-avmta-2.sfbay.sun.com>; Mon, 03 Mar 2008 15:00:50 -0800 (PST) Received: from marduk.eng.sun.com (marduk.SFBay.Sun.COM [129.146.108.224]) by dm-eng-02.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m23N0nEG021137; Mon, 03 Mar 2008 15:00:49 -0800 (PST) Received: from marduk.eng.sun.com (localhost [127.0.0.1]) by marduk.eng.sun.com (8.13.6+Sun/8.12.11) with ESMTP id m23N1UbZ006855; Mon, 03 Mar 2008 15:01:30 -0800 (PST) Received: (from gww@localhost) by marduk.eng.sun.com (8.13.6+Sun/8.12.11/Submit) id m23N1UAe006854; Mon, 03 Mar 2008 15:01:30 -0800 (PST) Date: Mon, 03 Mar 2008 15:01:30 -0800 (PST) From: Gary Winiger Subject: Re: Integrate fping into Solaris [PSARC/2008/160 FastTrack timeout 03/05/2008] To: dan.hain@sun.com, scott.rotondo@sun.com Cc: psarc-ext@sun.com Message-id: <200803032301.m23N1UAe006854@marduk.eng.sun.com> Content-transfer-encoding: 7BIT X-Sun-Charset: US-ASCII X-PMX-Version: 5.2.0.264296 Content-Length: 275 Status: RO X-Status: $$$$ X-UID: 0000000040 > Indeed. Sorry if my previous comment was unclear on this point. > > The man page should document the required privileges, but the code > should just assume it has the necessary privileges, make the system > calls, and report the errors that occur. Right ;-) Gary.. From gdamore@sun.com Tue Mar 4 08:36:39 2008 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m24Gaduq018297 for ; Tue, 4 Mar 2008 08:36:39 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m24GaVrS027097 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Tue, 4 Mar 2008 16:36:37 GMT Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JX700MC2SSXLK00@brm-avmta-1.central.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Tue, 04 Mar 2008 09:36:34 -0700 (MST) Received: from sca-es-mail-2.sun.com ([192.18.43.133]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JX700KCYSRADL40@brm-avmta-1.central.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Tue, 04 Mar 2008 09:35:36 -0700 (MST) Received: from fe-sfbay-09.sun.com ([192.18.43.129]) by sca-es-mail-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id m24GZYo2028359 for ; Tue, 04 Mar 2008 08:35:34 -0800 (PST) Received: from conversion-daemon.fe-sfbay-09.sun.com by fe-sfbay-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0JX700E01SOVTT00@fe-sfbay-09.sun.com> (original mail from gdamore@sun.com) for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Tue, 04 Mar 2008 08:35:34 -0800 (PST) Received: from [192.168.251.106] ([76.174.83.55]) by fe-sfbay-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0JX700B26SR8GCB0@fe-sfbay-09.sun.com>; Tue, 04 Mar 2008 08:35:33 -0800 (PST) Date: Tue, 04 Mar 2008 08:33:19 -0800 From: "Garrett D'Amore" Subject: Re: Integrate fping into Solaris [PSARC/2008/160 FastTrack timeout 03/05/2008] In-reply-to: <47C6AFD4.30106@Sun.COM> Sender: Garrett.Damore@sun.com To: Darren J Moffat Cc: James Carlson , Nicolas.Williams@sun.com, PSARC-ext@sun.com, Daniel Hain , Scott Rotondo Message-id: <47CD79CF.90709@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 References: <200802272313.m1RNDTMk009498@sac.sfbay.sun.com> <47C61141.2020001@sun.com> <20080228050920.GO21674@Sun.COM> <18374.43247.34045.323604@gargle.gargle.HOWL> <47C6AFD4.30106@Sun.COM> User-Agent: Thunderbird 2.0.0.6 (X11/20071023) Content-Length: 1431 Status: RO X-Status: $$$$ X-UID: 0000000041 Darren J Moffat wrote: > James Carlson wrote: >> Nicolas Williams writes: >>> On Wed, Feb 27, 2008 at 05:41:21PM -0800, Scott Rotondo wrote: >>>> 2. If the program is only usable by a privileged user, might it >>>> belong in /usr/sbin instead of /usr/bin? >>> OT (Reply-To set): >> >> But ignored. ;-} >> >>> Waaa. I hope the ARC gets around to setting a precedent for placing >>> low-risk in /usr/bin instead of /usr/sbin. >> >> We have a precedent. Things that are useful only for the system >> administrator go in /usr/sbin. Things that are useful for regular >> users go in /usr/bin. >> >> That precedent is documented on the filesystem(5) man page. >> >> It has nothing to do with privilege or risk. The only question to >> answer here (for this issue) is whether fping is useful for ordinary >> users. If it's not, then /usr/sbin would be the right answer. >> >> As for the privilege check, the reason the code does this is not that >> what it's doing requires special privilege (though it does). The >> reason is that the utility itself is mostly evil. Most users >> generally don't want people scanning subnets at high rates, looking >> for hosts to attack. > > We already have /usr/bin/nmap (not installed setuid though). > See also the recent (not yet approved) case for mtr. I'm going to raise a few points on that case, because many of the issues there are similar to the ones raised here. -- Garrett From gww@eng.sun.com Wed Mar 5 12:39:28 2008 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m25KdSsd016781 for ; Wed, 5 Mar 2008 12:39:28 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail3mpk.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m25KdSJf010836; Wed, 5 Mar 2008 12:39:28 -0800 (PST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JX900M03YPS2Q00@brm-avmta-1.central.sun.com>; Wed, 05 Mar 2008 13:39:28 -0700 (MST) Received: from dm-eng-02.sfbay.sun.com ([129.146.11.32]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JX9008XIYPRZGB0@brm-avmta-1.central.sun.com>; Wed, 05 Mar 2008 13:39:27 -0700 (MST) Received: from marduk.eng.sun.com (marduk.SFBay.Sun.COM [129.146.108.224]) by dm-eng-02.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m25KdRq4008537; Wed, 05 Mar 2008 12:39:27 -0800 (PST) Received: from marduk.eng.sun.com (localhost [127.0.0.1]) by marduk.eng.sun.com (8.13.6+Sun/8.12.11) with ESMTP id m25KeAHr011325; Wed, 05 Mar 2008 12:40:10 -0800 (PST) Received: (from gww@localhost) by marduk.eng.sun.com (8.13.6+Sun/8.12.11/Submit) id m25KeAp3011324; Wed, 05 Mar 2008 12:40:10 -0800 (PST) Date: Wed, 05 Mar 2008 12:40:10 -0800 (PST) From: Gary Winiger Subject: Re: Integrate fping into Solaris [PSARC/2008/160 FastTrack timeout 03/05/2008] To: dan.hain@sun.com, gww@eng.sun.com, PSARC-ext@sun.com Message-id: <200803052040.m25KeAp3011324@marduk.eng.sun.com> Content-transfer-encoding: 7BIT X-PMX-Version: 5.2.0.264296 Status: RO Content-Length: 1412 > > Security Impact: > > > > The original code base used a raw socket to communicate and > > required root > > access (geteuid() == 0). This has been modified to call > > priv_ineffect(PRIV_NET_ICMPACCESS) > > All uses of geteuid/getuid/seteuid have been compiled out. > > I'm not sure what is being said here. If the code is checking > that it inherits net_icmpaccess, it shouldn't. It should just > make the system calls. If they fail, give a diagnostic and exit. > > Gary.. > P.S. nit. The updated man page says net_rawaccess. Indeed the whole > RESTRICTIONS section should read: > Successful execution of this program requires that it be granted > the net_icmpaccess privilege. > Also add to > SEE ALSO > rbac(5), privileges(5) At today's PSARC meeting, I asked for more time to deal with this project's specification. IMO, the spec needs to be updated to correct the nits and to add an fping entry to a Rights Profile. I would suggest the Network Management Rights Profile. See http://opensolaris.org/os/community/arc/bestpractices/rbac-profiles/ Adding commands to an existing Rights Profile on ON or Adding a new Rights Profile to other gates, if not part of ON. If the project team has questions, please contact me off line. If privileges greater than "privs=net_icmpaccess" are required, IMO they need to be justified as part of this case. Gary..