Vulnerability Development: Re: "Re: ping flooding as normal user" and strange icmp behaviorwithLinux 2.4

[Alon Oz <alon () LINUXQA COM>]

Sebastian Pape wrote:

> hi!
> > It's also a good idea to prevent normal users from using
> > ping. "chmod 700 /bin/ping" should do the trick.
> What's that good for? If you have net access you can get "your own
> ping".
Ping needs to be suid root in order to run.

> > A better idea would be to allow normal users to use ping, but only
> > allow normal pings (no options like "-p" and "-s").
> iirc there should be a secure ping which prevents for example attacks
> with a program called pingflood and has the ability to log to syslogd.
>
> best regards
>
>         Sebastian
        -- Alon

--
For Sale: Parachute used only once, never opened, small stain.