All of lore.kernel.org
 help / color / mirror / Atom feed
From: matjaž <matjazbercic@lavabit.com>
To: Jan Engelhardt <jengelh@inai.de>
Cc: Steffen Heil <lists@steffen-heil.de>,
	Netfilter user mailing list <netfilter@vger.kernel.org>,
	rob0@gmx.co.uk, Eric Lebond <eric@regit.org>
Subject: Re: AW: Possible bug in iptables : -m --uid-owner not working with ping
Date: Mon, 22 Oct 2012 20:56:49 +0200	[thread overview]
Message-ID: <508596F1.6090802@lavabit.com> (raw)
In-Reply-To: <alpine.LNX.2.01.1210221816210.11589@nerf07.vanv.qr>

Thank you all for your explanations.
And yes, my ping is suid and this solves my problems.
Best regards,
Matjaž

On 10/22/2012 06:19 PM, Jan Engelhardt wrote:
> On Monday 2012-10-22 16:43, Steffen Heil (Mailinglisten) wrote:
>
>> Hi
>>
>> On my system /bin/ping has suid-bit set.
>> So it it always executed as root, not as the user invoking it.
>>
>> As far as I know, ping requires root privileges...
>
> Linux supports
>
> 	socket(AF_INET, SOCK_DGRAM, IPPROTO_ICMP)
>
> since v3.0, so ping does not _strictly_ need root anymore - and
> meanwhile fixes your owner "mismatch".
>


  reply	other threads:[~2012-10-22 18:56 UTC|newest]

Thread overview: 6+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2012-10-22 14:38 Possible bug in iptables : -m --uid-owner not working with ping matjaž
2012-10-22 14:43 ` AW: " Steffen Heil (Mailinglisten)
2012-10-22 16:19   ` Jan Engelhardt
2012-10-22 18:56     ` matjaž [this message]
2012-10-22 14:44 ` Eric Leblond
2012-10-22 14:44 ` /dev/rob0

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=508596F1.6090802@lavabit.com \
    --to=matjazbercic@lavabit.com \
    --cc=eric@regit.org \
    --cc=jengelh@inai.de \
    --cc=lists@steffen-heil.de \
    --cc=netfilter@vger.kernel.org \
    --cc=rob0@gmx.co.uk \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.