From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Grigory Batalov" Subject: Re: IPX without suidroot Date: Sat, 3 Aug 2002 01:43:56 +0400 Sender: linux-msdos-owner@vger.kernel.org Message-ID: <20020803014356.79be97d3.grisxa@mail.ru> References: <3D4ABF2A.3040305@yahoo.com> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <3D4ABF2A.3040305@yahoo.com> List-Id: Content-Type: text/plain; charset="us-ascii" To: linux-msdos@vger.kernel.org On Fri, 02 Aug 2002 21:19:38 +0400 "Stas Sergeev" wrote: > > IPX: Failure -2 adding route <261197cb through 00000002:000102877d41> > Ouch, and this time it comes to > the place which really requires > root (CAP_NET_ADMIN capability)... > Is this possible to set that route > manually (being root)? > Maybe something like > ipx_route add 261197cb 02 102877d41 > will do the trick? It is set already: $ cat /proc/net/ipx_route Network Router_Net Router_Node 261197CB 00000002 000102877D41 00000002 Directly Connected I think this route was added when I started dosemu as root before. > But even that may not help. I see. > Currently dosemu doesn't check if > the route exists *before* adding > it, so it still may fail. > To do the check /proc/net/ipx_route > must be parsed, but this is not > what I can do without an ability > to test the changes... > Anyway there were several bugs > discovered, so I'd like to bring > that investigation to some conclusion. > So if adding route manually doesn't > help, could you please (only for testing > purposes) remove the > if (!capable(CAP_NET_ADMIN)) > return -EPERM; > from kernel's af_ipx.c:2403 > (ipx_ioctl() ). Sure. Next week I'll do it and post results. > I want to know if my patch > really works and if there is > nothing more standing in the way... -- Grigory Batalov.