From owner-freebsd-questions@freebsd.org  Thu Nov 12 10:07:37 2015
Return-Path: <owner-freebsd-questions@freebsd.org>
Delivered-To: freebsd-questions@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 18B75A2BD80
 for <freebsd-questions@mailman.ysv.freebsd.org>;
 Thu, 12 Nov 2015 10:07:37 +0000 (UTC)
 (envelope-from guru@unixarea.de)
Received: from ms-10.1blu.de (ms-10.1blu.de [178.254.4.101])
 (using TLSv1 with cipher AES256-SHA (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id CF3BB129C
 for <freebsd-questions@freebsd.org>; Thu, 12 Nov 2015 10:07:36 +0000 (UTC)
 (envelope-from guru@unixarea.de)
Received: from [82.113.106.70] (helo=localhost.unixarea.de)
 by ms-10.1blu.de with esmtpsa (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32)
 (Exim 4.76) (envelope-from <guru@unixarea.de>) id 1ZwoIs-0002mf-N9
 for freebsd-questions@freebsd.org; Thu, 12 Nov 2015 10:36:27 +0100
Received: from localhost.my.domain (c720-r276659 [127.0.0.1])
 by localhost.unixarea.de (8.14.9/8.14.9) with ESMTP id tAC9aNTk003303
 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO)
 for <freebsd-questions@freebsd.org>; Thu, 12 Nov 2015 10:36:23 +0100 (CET)
 (envelope-from guru@unixarea.de)
Received: (from guru@localhost)
 by localhost.my.domain (8.14.9/8.14.9/Submit) id tAC9aMh4003302
 for freebsd-questions@freebsd.org; Thu, 12 Nov 2015 10:36:22 +0100 (CET)
 (envelope-from guru@unixarea.de)
X-Authentication-Warning: localhost.my.domain: guru set sender to
 guru@unixarea.de using -f
Date: Thu, 12 Nov 2015 10:36:22 +0100
From: Matthias Apitz <guru@unixarea.de>
To: freebsd-questions@freebsd.org
Subject: vpnc && setuid
Message-ID: <20151112093622.GA3261@c720-r276659>
Reply-To: Matthias Apitz <guru@unixarea.de>
Mail-Followup-To: Matthias Apitz <guru@unixarea.de>,
 freebsd-questions@freebsd.org
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
X-Operating-System: FreeBSD 11.0-CURRENT r269739 (i386)
User-Agent: Mutt/1.5.23 (2014-03-12)
X-Con-Id: 51246
X-Con-U: 0-guru
X-Originating-IP: 82.113.106.70
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.20
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions/>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 12 Nov 2015 10:07:37 -0000


Hallo,

I have changed /usr/local/sbin/vpnc to setuid on exec:

# ls -l /usr/local/sbin/vpnc
-rwsr-xr-x  1 root  wheel  105092 10 nov 20:12 /usr/local/sbin/vpnc

but the normal user can't use it, it says:

$ /usr/local/sbin/vpnc
couldn't open `/usr/local/etc/vpnc.conf': Permission denied

It is not a mount issue of the file system:

# mount
/dev/ada0p2 on / (ufs, local, noatime, journaled soft-updates)

What I'm doing wrong?

	matthias
-- 
Matthias Apitz, ✉ guru@unixarea.de, 🌐 http://www.unixarea.de/  ☎ +49-176-38902045