http://bugzilla.mindrot.org/show_bug.cgi?id=1223
Summary: tun/tap capability only works with root login (openssh-
4.3_p2)
Product: Portable OpenSSH
Version: 4.3p2
Platform: ix86
OS/Version: Linux
Status: NEW
Severity: normal
Priority: P2
Component: sshd
AssignedTo: bitbucket@mindrot.org
ReportedBy: opensshbugs@lakedaemon.net
I've been testing openssh-4.3_p2 on my gentoo systems for remote layer2
access to my home network. It works well (haven't tested latency
sensitive traffic, eg voip, yet), but only when logging in as root.
I've created a first draft patch against 4.3_p2 that compiles cleanly
on linux, and allows remote users to establish tun/tap vpn as
unprivileged users. This is done via the TUNSETOWNER ioctl().
This patch is proof of concept only. It does not add the capability to
the other *nixs, has not been tested for security, and needs to be
cleaned up. I'm willing to do that if there is interest in adding this
capability to openssh...
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
_______________________________________________
openssh-bugs mailing list
openssh-bugs@mindrot.org
http://lists.mindrot.org/mailman/listinfo/openssh-bugs
Summary: tun/tap capability only works with root login (openssh-
4.3_p2)
Product: Portable OpenSSH
Version: 4.3p2
Platform: ix86
OS/Version: Linux
Status: NEW
Severity: normal
Priority: P2
Component: sshd
AssignedTo: bitbucket@mindrot.org
ReportedBy: opensshbugs@lakedaemon.net
I've been testing openssh-4.3_p2 on my gentoo systems for remote layer2
access to my home network. It works well (haven't tested latency
sensitive traffic, eg voip, yet), but only when logging in as root.
I've created a first draft patch against 4.3_p2 that compiles cleanly
on linux, and allows remote users to establish tun/tap vpn as
unprivileged users. This is done via the TUNSETOWNER ioctl().
This patch is proof of concept only. It does not add the capability to
the other *nixs, has not been tested for security, and needs to be
cleaned up. I'm willing to do that if there is interest in adding this
capability to openssh...
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
_______________________________________________
openssh-bugs mailing list
openssh-bugs@mindrot.org
http://lists.mindrot.org/mailman/listinfo/openssh-bugs