OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: ethernet cards & promisc mode
From: Granquist, Lamont (lamontICOPYRIGHT.COM)
Date: Sun May 07 2000 - 19:06:24 CDT


Nope, much uglier...

from /usr/include/linux/capability.h:

#define CAP_NET_ADMIN 12

2^12 = 0x00001000
(bitwise not) 0x00001000 = 0xffffefff
echo "0xffffefff" > /proc/sys/kernel/cap-bound

as unpriv user whatever bits are unset get cleared, set bits are unchanged

or use lcap-0.0.3 (freshmeat?) which lets you use the names

On Sun, 7 May 2000, Bluefish wrote:
> Correct file is (linux 2.2.x):
> /usr/include/linux/capability.h
>
> I find no docs over how cap-bound works. Is the following correct?
>
> echo "CAP_NET_ADMIN = 0" >> /proc/sys/kernel/cap-bound
>
> ..:::::::::::::::::::::::::::::::::::::::::::::::::..
> http://www.11a.nu || http://bluefish.11a.nu
> eleventh alliance development & security team
>