Re: IPX without suidroot

Grigory Batalov
2002-08-02T21:43:56Z

On Fri, 02 Aug 2002 21:19:38 +0400
"Stas Sergeev" <stssppnn@yahoo.com> wrote:

> > IPX: Failure -2 adding route <261197cb through 00000002:000102877d41>
> Ouch, and this time it comes to
> the place which really requires
> root (CAP_NET_ADMIN capability)...
> Is this possible to set that route
> manually (being root)?
> Maybe something like
> ipx_route add 261197cb 02 102877d41
> will do the trick?

It is set already:

$ cat /proc/net/ipx_route
Network Router_Net Router_Node
261197CB 00000002 000102877D41
00000002 Directly Connected

I think this route was added when I started
dosemu as root before.

> But even that may not help.

I see.

> Currently dosemu doesn't check if
> the route exists *before* adding
> it, so it still may fail.
> To do the check /proc/net/ipx_route
> must be parsed, but this is not
> what I can do without an ability
> to test the changes...
> Anyway there were several bugs
> discovered, so I'd like to bring
> that investigation to some conclusion.

> So if adding route manually doesn't
> help, could you please (only for testing
> purposes) remove the
> if (!capable(CAP_NET_ADMIN))
> return -EPERM;
> from kernel's af_ipx.c:2403
> (ipx_ioctl() ).

Sure. Next week I'll do it and post results.

> I want to know if my patch
> really works and if there is
> nothing more standing in the way...

--
Grigory Batalov.