Re: IPX without suidroot

["Grigory Batalov" <grisxa@mail.ru>]

On Fri, 02 Aug 2002 21:19:38 +0400
"Stas Sergeev" <stssppnn@yahoo.com> wrote:

> > IPX: Failure -2 adding route <261197cb through 00000002:000102877d41>
> Ouch, and this time it comes to
> the place which really requires
> root (CAP_NET_ADMIN capability)...
> Is this possible to set that route
> manually (being root)?
> Maybe something like
> ipx_route add 261197cb 02 102877d41
> will do the trick?

  It is set already:

$ cat /proc/net/ipx_route 
Network    Router_Net   Router_Node
261197CB   00000002     000102877D41
00000002   Directly     Connected

  I think this route was added when I started
  dosemu as root before.

> But even that may not help.

  I see.

> Currently dosemu doesn't check if
> the route exists *before* adding
> it, so it still may fail.
> To do the check /proc/net/ipx_route
> must be parsed, but this is not
> what I can do without an ability
> to test the changes...
> Anyway there were several bugs
> discovered, so I'd like to bring
> that investigation to some conclusion.

> So if adding route manually doesn't
> help, could you please (only for testing
> purposes) remove the
> if (!capable(CAP_NET_ADMIN))
>   return -EPERM;
> from kernel's af_ipx.c:2403
> (ipx_ioctl() ).

  Sure. Next week I'll do it and post results.

> I want to know if my patch
> really works and if there is
> nothing more standing in the way...

-- 
 Grigory Batalov.