source: basicnet/netutils/traceroute/traceroute-exp.xml@ f45b1953

10.0 10.1 11.0 11.1 6.0 6.1 6.2 6.2.0 6.2.0-rc1 6.2.0-rc2 6.3 6.3-rc1 6.3-rc2 6.3-rc3 7.10 7.4 7.5 7.6 7.6-blfs 7.6-systemd 7.7 7.8 7.9 8.0 8.1 8.2 8.3 8.4 9.0 9.1 basic bdubbs/svn elogind gnome initial-import kde5-13430 kde5-14269 kde5-14686 krejzi/svn lazarus nosym perl-modules qt5new reorg systemd-11177 systemd-13485 trunk upgradedb v1_0 v5_0 v5_0-pre1 v5_1 v5_1-pre1 xry111/intltool xry111/test-20220226
Last change on this file since f45b1953 was f45b1953, checked in by Mark Hymers <markh@…>, 20 years ago

Initial revision

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@3 af4574ff-66df-0310-9fd7-8a98e5e911e0

  • Property mode set to 100644
File size: 1.4 KB
Line 
1<sect2>
2<title>Command explanations</title>
3
4<para><screen><userinput>sed 's|@prefix@|/usr|' Makefile.in &gt; Makefile.in~ mv Makefile.in~ Makefile.in :</userinput></screen>
5Adjusts the Makefile so that traceroute will be installed in /usr/sbin
6instead of /usr/local/sbin, which is where the default
7installation puts it.</para>
8
9<para><userinput>make install: </userinput> Installs traceroute setuid root
10in the /usr/sbin directory. This makes it possible for all users to execute
11traceroute. For absolute security, turn off the setuid bit in traceroute's
12file permissions with the command
13<screen><userinput>chmod 0755 /usr/sbin/traceroute</userinput></screen></para>
14
15<para>The risk is that if a security problem such as a buffer overflow were
16ever found in the traceroute code, a regular user on your system could gain
17root access if the program is setuid root. Removing the setuid permission
18of course also makes it impossible for users other than root to utilize
19traceroute, so decide what's right for your individual situation.</para>
20
21<para>Now, to be completely FHS compliant, as is our aim, if you do leave the
22traceroute binary setuid root, then you should move traceroute to /usr/bin
23with the following command:
24<screen><userinput>mv /usr/sbin/traceroute /usr/bin</userinput></screen></para>
25
26<para>This ensures that the binary is in the path for non-root users.</para>
27
28</sect2>
29
Note: See TracBrowser for help on using the repository browser.