FAQ Search Today's Posts Mark Forums Read
» Video Reviews

» Linux Archive

Linux-archive is a website aiming to archive linux email lists and to make them easily accessible for linux users/developers.


» Sponsor

» Partners

» Sponsor

Go Back   Linux Archive > Redhat > Fedora User

 
 
LinkBack Thread Tools
 
Old 06-25-2012, 06:42 AM
Ed Greshko
 
Default ping problem

On 06/25/2012 02:22 PM, Ed Greshko wrote:
> I forget what black on a red background means.

OK.... Now I remember....or at least relearned.

Looking at LS_COLORS it is the ca=30;41 which gives black letters on red background.
Which equates to "capability".

So....do you have something like this?

egreshko@f17 tmp]$ lsattr /bin/ping
-------------e- /bin/ping

If not....your extended attributes have been altered.

--
Never be afraid to laugh at yourself, after all, you could be missing out on the joke
of the century. -- Dame Edna Everage
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
 
Old 06-25-2012, 06:47 AM
Ed Greshko
 
Default ping problem

On 06/25/2012 02:42 PM, Ed Greshko wrote:
> OK.... Now I remember....or at least relearned.
>
> Looking at LS_COLORS it is the ca=30;41 which gives black letters on red background.
> Which equates to "capability".
>
> So....do you have something like this?
>
> egreshko@f17 tmp]$ lsattr /bin/ping
> -------------e- /bin/ping
>
> If not....your extended attributes have been altered.

Actually.....strike all that..... Or at least most of it..... Need to rethink...

--
Never be afraid to laugh at yourself, after all, you could be missing out on the joke
of the century. -- Dame Edna Everage
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
 
Old 06-25-2012, 06:54 AM
JD
 
Default ping problem

On 06/25/2012 12:22 AM, Ed Greshko wrote:

On 06/25/2012 01:21 PM, JD wrote:

fc16 with latest updates.

Pinging my gateway:
$ ping 192.168.42.129
ping: icmp open socket: Operation not permitted

Now as root:

# ping 192.168.42.129
PING 192.168.42.129 (192.168.42.129) 56(84) bytes of data.
64 bytes from 192.168.42.129: icmp_req=1 ttl=64 time=3.53 ms
64 bytes from 192.168.42.129: icmp_req=2 ttl=64 time=2.65 ms
64 bytes from 192.168.42.129: icmp_req=3 ttl=64 time=2.83 ms

When was this change put in place?


It hasn't...... I say this since everything works just fine for me on my fully
updated f16 system.

Assuming you have the default LS_COLORS defined when you do "ls /bin/ping" you should
see it listed in black on a red background.

If not, something has *been* changed.

Now /bin/mount is in white on a red background which indicates the suid bit is set.
I forget what black on a red background means.

I suppose the easiest way to fix the issue would be to....

yum reinstall iputils


$ alias ls
alias ls='ls --color=auto'
$ ls /bin/ping
/bin/ping
appears in green color on white background. My gnome-terminal's
profile is setup to have a white background.


$ ls -l /bin/ping
-rwxr-xr-x 1 root root 39344 Nov 10 2011 /bin/ping

No suid.

$ lsattr /bin/ping
-------------e- /bin/ping

Should I run relabel when system boots next time?

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
 
Old 06-25-2012, 06:55 AM
JD
 
Default ping problem

On 06/25/2012 12:24 AM, Larry wrote:
On
06/25/2012 12:21 AM, JD wrote:


fc16 with latest updates.




Pinging my gateway:


$ ping 192.168.42.129


ping: icmp open socket: Operation not permitted




Now as root:




# ping 192.168.42.129


PING 192.168.42.129 (192.168.42.129) 56(84) bytes of data.


64 bytes from 192.168.42.129: icmp_req=1 ttl=64 time=3.53 ms


64 bytes from 192.168.42.129: icmp_req=2 ttl=64 time=2.65 ms


64 bytes from 192.168.42.129: icmp_req=3 ttl=64 time=2.83 ms




When was this change put in place?







This sounds like you have iptables blocking icmp. Check your
firewall rules.









I checked. I have no rules for
blocking any icmp (incoming or outgoing).






--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
 
Old 06-25-2012, 06:57 AM
Ed Greshko
 
Default ping problem

On 06/25/2012 02:54 PM, JD wrote:
> On 06/25/2012 12:22 AM, Ed Greshko wrote:
>> On 06/25/2012 01:21 PM, JD wrote:
>>> fc16 with latest updates.
>>>
>>> Pinging my gateway:
>>> $ ping 192.168.42.129
>>> ping: icmp open socket: Operation not permitted
>>>
>>> Now as root:
>>>
>>> # ping 192.168.42.129
>>> PING 192.168.42.129 (192.168.42.129) 56(84) bytes of data.
>>> 64 bytes from 192.168.42.129: icmp_req=1 ttl=64 time=3.53 ms
>>> 64 bytes from 192.168.42.129: icmp_req=2 ttl=64 time=2.65 ms
>>> 64 bytes from 192.168.42.129: icmp_req=3 ttl=64 time=2.83 ms
>>>
>>> When was this change put in place?
>>>
>> It hasn't...... I say this since everything works just fine for me on my fully
>> updated f16 system.
>>
>> Assuming you have the default LS_COLORS defined when you do "ls /bin/ping" you should
>> see it listed in black on a red background.
>>
>> If not, something has *been* changed.
>>
>> Now /bin/mount is in white on a red background which indicates the suid bit is set.
>> I forget what black on a red background means.
>>
>> I suppose the easiest way to fix the issue would be to....
>>
>> yum reinstall iputils
>>
> $ alias ls
> alias ls='ls --color=auto'
> $ ls /bin/ping
> /bin/ping
> appears in green color on white background. My gnome-terminal's profile is setup
> to have a white background.
>
> $ ls -l /bin/ping
> -rwxr-xr-x 1 root root 39344 Nov 10 2011 /bin/ping
>
> No suid.
>
> $ lsattr /bin/ping
> -------------e- /bin/ping
>
> Should I run relabel when system boots next time?

No....it has nothing to do with the label.... And the command I gave earlier was
*wrong*.

You want....

[root@f17 tmp]# getcap /bin/ping
/bin/ping = cap_net_raw+ep

to show the "capabilities".

I suggest reinstalling iputils as I said earlier....


--
Never be afraid to laugh at yourself, after all, you could be missing out on the joke
of the century. -- Dame Edna Everage
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
 
Old 06-25-2012, 06:59 AM
Ed Greshko
 
Default ping problem

On 06/25/2012 02:47 PM, Ed Greshko wrote:
> Actually.....strike all that..... Or at least most of it..... Need to rethink...

OK.... *NOW* I do have it....

The "correct" command is "getcap"

root@f17 tmp]# getcap /bin/ping
/bin/ping = cap_net_raw+ep

If nothing is returned from getcap then it isn't set....

--
Never be afraid to laugh at yourself, after all, you could be missing out on the joke
of the century. -- Dame Edna Everage
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
 
Old 06-25-2012, 07:07 AM
JD
 
Default ping problem

On 06/25/2012 12:57 AM, Ed Greshko wrote:

getcap /bin/ping

$ getcap /bin/ping
$

But how could this happen??

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
 
Old 06-25-2012, 07:16 AM
Ed Greshko
 
Default ping problem

On 06/25/2012 03:07 PM, JD wrote:
> On 06/25/2012 12:57 AM, Ed Greshko wrote:
>> getcap /bin/ping
> $ getcap /bin/ping
> $
>
> But how could this happen??
>

Usually it happens by someone copying the file, or replacing the file.

[egreshko@meimei ~]$ ll /bin/ping
-rwxr-xr-x. 1 root root 39344 Nov 10 2011 /bin/ping
[egreshko@meimei ~]$ cat /bin/ping | sha256sum
b7eaaa776658fb9fff65dd927cc9480d39a3221129aceaa07d 642ef6d9c33e4c -

If you've got an i686 install I fairly sure these values should match.

--
Never be afraid to laugh at yourself, after all, you could be missing out on the joke
of the century. -- Dame Edna Everage
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
 
Old 06-25-2012, 12:22 PM
Daniel
 
Default ping problem

On 06/25/2012 05:00 AM, users-request@lists.fedoraproject.org wrote:

[egreshko@meimei ~]$ ll /bin/ping
-rwxr-xr-x. 1 root root 39344 Nov 10 2011 /bin/ping
[egreshko@meimei ~]$ cat /bin/ping | sha256sum
b7eaaa776658fb9fff65dd927cc9480d39a3221129aceaa07d 642ef6d9c33e4c -

If you've got an i686 install I fairly sure these values should match.


In case it's a 64-bit installation:

[daniel@localhost ~]$ ll /bin/ping
-rwxr-xr-x. 1 root root 40912 Jan 25 11:52 /bin/ping
[daniel@localhost ~]$ cat /bin/ping | sha256sum
88ba5b93886106262ab579f2178354ec39cb298f72dca60c4b 302d9d70f367b7 -



--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
 
Old 06-25-2012, 02:10 PM
Bill Davidsen
 
Default ping problem

JD wrote:

On 06/25/2012 12:22 AM, Ed Greshko wrote:

On 06/25/2012 01:21 PM, JD wrote:

fc16 with latest updates.

Pinging my gateway:
$ ping 192.168.42.129
ping: icmp open socket: Operation not permitted

Now as root:

# ping 192.168.42.129
PING 192.168.42.129 (192.168.42.129) 56(84) bytes of data.
64 bytes from 192.168.42.129: icmp_req=1 ttl=64 time=3.53 ms
64 bytes from 192.168.42.129: icmp_req=2 ttl=64 time=2.65 ms
64 bytes from 192.168.42.129: icmp_req=3 ttl=64 time=2.83 ms

When was this change put in place?


It hasn't...... I say this since everything works just fine for me on my fully
updated f16 system.

Assuming you have the default LS_COLORS defined when you do "ls /bin/ping" you
should
see it listed in black on a red background.

If not, something has *been* changed.

Now /bin/mount is in white on a red background which indicates the suid bit is
set.
I forget what black on a red background means.

I suppose the easiest way to fix the issue would be to....

yum reinstall iputils


$ alias ls
alias ls='ls --color=auto'
$ ls /bin/ping
/bin/ping
appears in green color on white background. My gnome-terminal's profile is
setup to have a white background.

$ ls -l /bin/ping
-rwxr-xr-x 1 root root 39344 Nov 10 2011 /bin/ping

No suid.

$ lsattr /bin/ping
-------------e- /bin/ping

Should I run relabel when system boots next time?


If you want it to work now, why not run it now?

I personally take a dim view of using colors instead of looking at permissions,
attributes, and capabilities directly. Not only do you have to remember one more
presentation to meaning layer, but many displays do a poor job of presenting
pastel colors on white, so even the names are hard to read.


--
Bill Davidsen <davidsen@tmr.com>
"We have more to fear from the bungling of the incompetent than from
the machinations of the wicked." - from Slashdot


--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
 

Thread Tools




All times are GMT. The time now is 11:00 AM.

VBulletin, Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO ©2007, Crawlability, Inc.
Copyright ©2007 - 2008, www.linux-archive.org