Disable PING command

Matthew Hunt mph at astro.caltech.edu
Thu Jul 3 14:51:13 PDT 2003


On Thu, Jul 03, 2003 at 02:03:57PM -0700, K Anderson wrote:

> Good luck. All it takes is a user to port, transfere, compile, copy, 
> move or hack in a ping command of their own. Any languages could be 
> used, PERL, PHP, Python and much more.

Well, it takes that along with making their copy SUID root, which they
presumably can't do.

wopr:~$ sudo chmod u-s /sbin/ping
wopr:~$ ping wopr
ping: socket: Operation not permitted
wopr:~$ sudo chmod u+s /sbin/ping
wopr:~$ ping wopr
PING wopr.caltech.edu (131.215.103.10): 56 data bytes
64 bytes from 131.215.103.10: icmp_seq=0 ttl=64 time=0.240 ms

-- 
Matthew Hunt <mph at astro.caltech.edu> * Science rules.
http://www.pobox.com/~mph/           *


More information about the freebsd-questions mailing list