[gentoo-dev] net-analyzer/traceroute merge strangeness

[gentoo-dev] net-analyzer/traceroute merge strangeness

[Jeff Walter]

I just emerge'd traceroute, dropped back to my normal user, and it didn't run. 
So, I checked the emerge messages and saw this:

<snip!>
  * >>> SetUID: [chmod go-r] 
/var/tmp/portage/net-analyzer/traceroute-1.4_p12-r5/image//usr/sbin/traceroute 
... 
                                           [ ok ]
--- /usr/
--- /usr/sbin/
 >>> /usr/sbin/traceroute
<snip!>

I can understand traceroute being setuid, but why put it in /usr/sbin so only 
root sees it?  If we only want root to run it, it doesn't need to be setuid.  It 
just doesn't make sense for a setuid application to only be directly available 
to root.

--
Jeff Walter
-- 
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] net-analyzer/traceroute merge strangeness

[Jonathan Adamczewski]

Jeff Walter wrote:
>
> I can understand traceroute being setuid, but why put it in /usr/sbin 
> so only root sees it?


Huh?  Just add /usr/sbin to your PATH.

$ export PATH=$PATH:/usr/sbin
$ traceroute
Version 1.4a12
Usage: traceroute [-dFInrvx] [-g gateway] [-i iface] [-f first_ttl]
        [-m max_ttl] [ -p port] [-q nqueries] [-s src_addr] [-t tos]
        [-w waittime] [-z pausemsecs] host [packetlen]
$


j.
-- 
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] net-analyzer/traceroute merge strangeness

[Ioannis Aslanidis]

On 4/12/07, Jonathan Adamczewski <jadamcze@utas.edu.au> wrote:
> Jeff Walter wrote:
> >
> > I can understand traceroute being setuid, but why put it in /usr/sbin
> > so only root sees it?
>
>

That is not a clean solution. Do we have to presume that traceroute
has to be used like ifconfig, or is it the real purpose to be run by
users at their own discretion?

-- 
Ioannis Aslanidis

<deathwing00[at]gentoo.org> 0xB9B11F4E
-- 
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] net-analyzer/traceroute merge strangeness

[Rob C]

[-- Attachment #1: Type: text/plain, Size: 937 bytes --]

On 12/04/07, Jonathan Adamczewski <jadamcze@utas.edu.au> wrote:
>
> Jeff Walter wrote:
> >
> > I can understand traceroute being setuid, but why put it in /usr/sbin
> > so only root sees it?
>
>
> Huh?  Just add /usr/sbin to your PATH.
>
> $ export PATH=$PATH:/usr/sbin
> $ traceroute
> Version 1.4a12
> Usage: traceroute [-dFInrvx] [-g gateway] [-i iface] [-f first_ttl]
>         [-m max_ttl] [ -p port] [-q nqueries] [-s src_addr] [-t tos]
>         [-w waittime] [-z pausemsecs] host [packetlen]
> $
>
>
> j.
> --
> gentoo-dev@gentoo.org mailing list
>
>
Although Jonathan is correct in pointing out that you can modify the search
path, this is not really a valid response...

Traceroute is heavily used by many people and therefore I don't think its
reasonable to place it somewhere in the file system that a typical user does
not have within their $PATH

Bug time?
-Rob
-- 
/**
  * Gentoo Linux Developer
  * GPG : 0x2217D168
  */

[-- Attachment #2: Type: text/html, Size: 1595 bytes --]

Re: [gentoo-dev] net-analyzer/traceroute merge strangeness

[Mike Frysinger]

[-- Attachment #1: Type: text/plain, Size: 434 bytes --]

On Thursday 12 April 2007, Jeff Walter wrote:
> I can understand traceroute being setuid, but why put it in /usr/sbin so
> only root sees it?  If we only want root to run it, it doesn't need to be
> setuid.  It just doesn't make sense for a setuid application to only be
> directly available to root.

this package has always sucked ... it needs to be punted for the newer one at 
http://dmitry.butskoy.name/traceroute
-mike

[-- Attachment #2: Type: application/pgp-signature, Size: 827 bytes --]

Re: [gentoo-dev] net-analyzer/traceroute merge strangeness

[Timothy Redaelli]

[-- Attachment #1: Type: text/plain, Size: 872 bytes --]

Mike Frysinger ha scritto:
> On Thursday 12 April 2007, Jeff Walter wrote:
>> I can understand traceroute being setuid, but why put it in /usr/sbin so
>> only root sees it?  If we only want root to run it, it doesn't need to be
>> setuid.  It just doesn't make sense for a setuid application to only be
>> directly available to root.
> 
> this package has always sucked ... it needs to be punted for the newer one at 
> http://dmitry.butskoy.name/traceroute
> -mike

You should (also) fix net-misc/iputils for /usr/sbin/traceroute6 or
maybe it's better to create a dedicate ebuild for traceroute6?

-- 
Timothy `Drizzt` Redaelli - http://dev.gentoo.org/~drizzt/
FreeSBIE Developer, Gentoo Developer, GUFI Staff
There are two major products that come out of Berkeley: LSD and UNIX.
We don't believe this to be a coincidence.      -- Jeremy S. Anderson


[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 252 bytes --]

Re: [gentoo-dev] net-analyzer/traceroute merge strangeness

[Jeff Walter]

Mike Frysinger wrote:
> this package has always sucked ... it needs to be punted for the newer one at 
> http://dmitry.butskoy.name/traceroute
> -mike

:-)

Well, that's a separate subject all together.  I'm just talking about placement 
of the binary.

--
Jeff Walter
-- 
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] net-analyzer/traceroute merge strangeness

[Jeff Walter]

Rob C wrote:
> Although Jonathan is correct in pointing out that you can modify the 
> search path, this is not really a valid response...
> 
> Traceroute is heavily used by many people and therefore I don't think 
> its reasonable to place it somewhere in the file system that a typical 
> user does not have within their $PATH
> 
> Bug time?
> -Rob


Bug #174278 submitted.  I'm sure Mike will be submitting one as well, if he 
doesn't thwack that "issue" on his own ;-)

--
Jeff Walter
-- 
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] net-analyzer/traceroute merge strangeness

[Mike Frysinger]

[-- Attachment #1: Type: text/plain, Size: 199 bytes --]

On Thursday 12 April 2007, Timothy Redaelli wrote:
> You should (also) fix net-misc/iputils for /usr/sbin/traceroute6

yes

> maybe it's better to create a dedicate ebuild for traceroute6?

no
-mike

[-- Attachment #2: Type: application/pgp-signature, Size: 827 bytes --]

Re: [gentoo-dev] net-analyzer/traceroute merge strangeness

[Mike Frysinger]

[-- Attachment #1: Type: text/plain, Size: 381 bytes --]

On Thursday 12 April 2007, Jeff Walter wrote:
> Mike Frysinger wrote:
> > this package has always sucked ... it needs to be punted for the newer
> > one at http://dmitry.butskoy.name/traceroute
>
> Well, that's a separate subject all together.  I'm just talking about
> placement of the binary.

i'm not going to fix just the path issue, i'm going to do em both in one sweep
-mike

[-- Attachment #2: Type: application/pgp-signature, Size: 827 bytes --]

Re: [gentoo-dev] net-analyzer/traceroute merge strangeness

[Jeff Walter]

Mike Frysinger wrote:
> i'm not going to fix just the path issue, i'm going to do em both in one sweep
> -mike

Well, you won't find me complaining.  ;-)

--
Jeff Walter
-- 
gentoo-dev@gentoo.org mailing list