Mailing List Archive: [Bug 154] ripd doesn't run as unprivileged user under Solaris 8

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug
report.

http://bugzilla.quagga.net/show_bug.cgi?id=154

hasso@quagga.net changed:

What |Removed |Added
----------------------------------------------------------------------------
Status|UNCONFIRMED |ASSIGNED
Ever Confirmed| |1

------- Additional Comments From paul@dishone.st 2005-06-03 19:14 -------
Hi Philip,

Like Hasso, I'm a bit sceptical that this is a Quagga problem. If it were, the
socket() call should fail, and we log that. You get a bind error though. This
sounds like a Solaris 8 problem. I havn't seen this problem on S10.

Is your Solaris 8 up to date wrt patches?

I havn't commited your patch to CVS, but I have cleaned up ripd slightly to
avoid duplicating rip_create_socket. Could you test CVS HEAD by any chance and
try replicate again with that? (once you've checked your machine is fully
patched up :) ).

thanks,

--paulj

------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug
report.

http://bugzilla.quagga.net/show_bug.cgi?id=154

------- Additional Comments From philipp@open.ch 2005-06-10 17:33 -------
Hi Paul,

I've checked out the latest CVS version of 0.99.1, and installed it on a Sun
V210 running Solaris 8 02/04 (Sparc) with the recommended patch cluster of May
26, 2005. Unfortunately, it seems that the problem has not gone away yet.

There are no visible errors on startup, but the bind to the UDP port still seems
to fail. Here's what I've tried:

Command:
/usr/sbin/ripd -f /etc/ripd.conf -A 127.0.0.1 -P 0 -i /var/run/quagga/ripd.pid

quagga-0.98.3 release
---------------------
# lsof -i | egrep '^zebra|^ripd'
ripd 29832 zebra 6u IPv4 0x30002e6b9c0 0t0 UDP *:* (Unbound)

28946: so_socket(2, 1, 0, "", 4) = 6
28946: setsockopt(6, 65535, 32, 0xFFBEF0B4, 4, 1) = 0
28946: setsockopt(6, 65535, 4, 0xFFBEF0B4, 4, 1) = 0
28946: setsockopt(6, 65535, 4098, 0xFFBEF110, 4, 1) = 0
28946: seteuid(0) = 0
28946: bind(6, 0xFFBEF128, 16, 4) Err#13 EACCES
28946: seteuid(143) = 0

quagga-0.99.1-20050604 CVS
--------------------------
# lsof -i | egrep '^zebra|^ripd'
(no reported ports)

28626: so_socket(2, 1, 0, "", 4) = 6
28626: setsockopt(6, 65535, 32, 0xFFBEF0A4, 4, 1) = 0
28626: setsockopt(6, 65535, 4, 0xFFBEF0A4, 4, 1) = 0
28626: seteuid(0) = 0
28626: setsockopt(6, 65535, 4098, 0xFFBEF100, 4, 1) = 0
28626: bind(6, 0xFFBEF118, 16, 4) Err#13 EACCES
28626: seteuid(143) = 0

quagga-0.98.3 with my patch
----------------------------
# lsof -i | egrep '^zebra|^ripd'
ripd 29649 zebra 6u IPv4 0x30002e6bcc0 0t0 UDP *:route (Idle)

29633: seteuid(0) = 0
29633: so_socket(2, 1, 0, "", 4) = 6
29633: setsockopt(6, 65535, 32, 0xFFBEF0CC, 4, 1) = 0
29633: setsockopt(6, 65535, 4, 0xFFBEF0CC, 4, 1) = 0
29633: setsockopt(6, 65535, 4098, 0xFFBEF128, 4, 1) = 0
29633: bind(6, 0xFFBEF140, 16, 4) = 0
29633: seteuid(143) = 0

If you need more traces, let me know.

Best Regards,
-Philipp

------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.