FS#10938 - [ppp] pppd is unusable for non-root users

Attached to Project: Arch Linux
Opened by Roman Kyrylych (Romashka) - Thursday, 17 July 2008, 12:57 GMT
Last edited by Roman Kyrylych (Romashka) - Sunday, 20 July 2008, 12:51 GMT
Task Type Bug Report
Category Packages: Core
Status Closed
Assigned To Thomas Bächler (brain0)
Roman Kyrylych (Romashka)
Architecture All
Severity Medium
Priority Normal
Reported Version 2007.08-2
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 1
Private No

Details

pppd is unusable when called by non-root user via wvdial or its frontends (e.g. gnome-ppp) instead of using rc.d/ppp

1) {chap,pap}-secrets are unavailable for uucp group (which owns devices like /dev/tts/USB0)
GNOME PPP: STDERR: --> Starting pppd at Thu Jul 17 15:38:59 2008
GNOME PPP: STDERR: --> Warning: Could not modify /etc/ppp/pap-secrets: Permission denied
GNOME PPP: STDERR: --> --> PAP (Password Authentication Protocol) may be flaky.
GNOME PPP: STDERR: --> Warning: Could not modify /etc/ppp/chap-secrets: Permission denied
GNOME PPP: STDERR: --> --> CHAP (Challenge Handshake) may be flaky.
because of:
# ls -l /etc/ppp/{chap,pap}-secrets
-rw------- 1 root root 96 Jul 17 15:34 /etc/ppp/chap-secrets
-rw------- 1 root root 95 Jul 17 15:34 /etc/ppp/pap-secrets

I think they should be 660 root:uucp

2) /usr/sbin/pppd cannot be used by non-root
it has 0555 permissions and root:root ownership
but needs to be 4550 (suid) root:uucp to be usable by non-root user from uucp group (and not other users)

GNOME PPP: STDERR: --> Pid of pppd: 16413
GNOME PPP: STDERR: --> Disconnecting at Thu Jul 17 15:54:06 2008
GNOME PPP: STDERR: --> The PPP daemon has died: No root priv error (exit code = 3)
GNOME PPP: STDERR: --> man pppd explains pppd error codes in more detail.
GNOME PPP: STDERR: --> I guess that's it for now, exiting
GNOME PPP: STDERR: --> The PPP daemon has died. (exit code = 3)
This task depends upon

Closed by  Roman Kyrylych (Romashka)
Sunday, 20 July 2008, 12:51 GMT
Reason for closing:  Not a bug
Comment by Glenn Matthys (RedShift) - Thursday, 17 July 2008, 14:56 GMT
Why not just chmod/chown them yourself? And uucp has nothing to do with ppp.
Comment by Greg (dolby) - Thursday, 17 July 2008, 16:31 GMT
Im most definately not closing this, but im wondering why should pppd (the daemon) be accessible for non root users.
Comment by Roman Kyrylych (Romashka) - Sunday, 20 July 2008, 12:51 GMT
My fault, I've totally misunderstood the problem.
The solution is already described here: http://wiki.archlinux.org/index.php/Allow_users_to_dial_with_wvdial :-)

Loading...