fedora core 3 probable security exposure

[Matthew Miller]

On Tue, May 03, 2005 at 11:24:19PM -0400, Jude DaShiell wrote:
> It is not possible to run dhclient ifconfig and ifup unless running as 
> actual root.  Using su -c "command" returns the misinformation that these 
> commands are not found.  Personally I prefer using su -c from a user 
> account to bring up and take down the network while this was possible in 
> debian 2.4.27 it's so far not possible on speakup version of fedora out of 
> the box or updated.

I think it's just telling you that you need to run 'su -c /sbin/ifup' -- or
probably better, 'sudo /sbin/ifup'. /sbin isn't in your path.

But, you can also make it so ifup and ifdown can be executed as *non-root*,
if you want. In the GUI network config tool for the interface, check "Allow
all users to enable and disable the device", or, put "USERCTL=yes" in
/etc/sysconfig/network-scripts/eth0 (or whatever the device is named).



-- 
Matthew Miller           mattdm at mattdm.org        <http://www.mattdm.org/>
Boston University Linux      ------>                <http://linux.bu.edu/>
Current office temperature: 78 degrees Fahrenheit.