Date: Wed, 13 Aug 2003 13:42:46 GMT From: Mark <admin@asarian-host.net> To: "Andy Farkas" <andyf@speednet.com.au>, "Markie" <markie@notwentytwo.freeserve.co.uk> Cc: freebsd-questions@freebsd.org Subject: Re: Restricting ICMP Message-ID: <200308131342.H7DDGEWG005511@asarian-host.net> References: <20030813231812.O90272-100000@hewey.af.speednet.com.au>
next in thread | previous in thread | raw e-mail | index | archive | help
----- Original Message ----- From: "Andy Farkas" <andyf@speednet.com.au> To: "Markie" <markie@notwentytwo.freeserve.co.uk> Cc: "Mark" <admin@asarian-host.net>; "Ruben de Groot" <mail23@bzerk.org>; <freebsd-questions@freebsd.org> Sent: Wednesday, August 13, 2003 3:20 PM Subject: Re: Restricting ICMP > > Is it? I thought it was setuid root for a reason :o) > .... > > I just woke up, so it may well be I am just being stupid :o) > > Well, I didn't know ping needed suid. I stand corrected and > apologise for any misleadings. > > /me is the stupid one... time to go to bed :) If it makes you feel any better, I feel rather stupid too. :) Here I was, thinking: "Hmm, chmod g+s, as means of allowing only folks in wheel access, is not going to work;" whereas the glaringly obvious solution: to remove execution-bits from "o" using chmod 4550, for some bizarre reason, escaped me. :) /me, feeling stupid too. - Mark
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200308131342.H7DDGEWG005511>