OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [suse-security] Root priveleges and wvdial

From: Bob Vickers (bobvcs.rhul.ac.uk)
Date: Mon Jun 09 2003 - 05:29:05 CDT

Keith,

If my memory is right, you have to (a) put users who need to dial out into
group dialout and (b) have the right permissions on the various programs,
(e.g. pppd).

If you have set your security configuration in Yast to be paranoid then
the permissions will be too restrictive, so you should switch to either
the secure or easy setting. Or set appropriate permissions in
/etc/permissions.local.

Bob

On Sat, 7 Jun 2003 keithtopaz5.worldonline.co.uk wrote:

>
> Hi all!
>
> I can't seem to get wvdial working as normal user.
>
> keithtopaz:~> wvdial
> --> WvDial: Internet dialer version 1.42
> --> Initializing modem.
> --> Sending: AT&F0&C1
> AT&F0&C1
> OK
> --> Modem initialized.
> --> Sending: ATDT1470 0808 0000 000 (changed number)
> --> Waiting for carrier.
> ATDT1470 0808 0000 000
> CONNECT 38400
> --> Carrier detected. Starting PPP immediately.
> --> Starting pppd at Sat Jun 7 22:17:51 2003
> --> pid of pppd: 771
> --> Disconnecting at Sat Jun 7 22:17:51 2003
> --> The PPP daemon has died: No root priv error (exit code =
> 3)
> --> man pppd explains pppd error codes in more detail.
> --> I guess that's it for now, exiting
> --> The PPP daemon has died. (exit code = 3)
> keithtopaz:~>
>
> Is this a security risk, dialling out as root user?
>
> Does anyone know how to use wvdial to dial up my ISP as
> normal user, i.e. not root user.
>
> Regards & TIA - Keith Roberts
>
>
>
>
>
>
>
>
> --
> Check the headers for your unsubscription address
> For additional commands, e-mail: suse-security-helpsuse.com
> Security-related bug reports go to securitysuse.de, not here
>

==============================================================
Bob Vickers R.Vickerscs.rhul.ac.uk
Dept of Computer Science, Royal Holloway, University of London
WWW: http://www.cs.rhul.ac.uk/home/bobv
Phone: +44 1784 443691

--
Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-helpsuse.com
Security-related bug reports go to securitysuse.de, not here