system/freebsd-src
system/freebsd-src
1
0
Fork 0
mirror of https://github.com/freebsd/freebsd-src synced 2024-09-28 20:55:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

o Allow non-root users to open /dev/tun* (remove suser()

Browse source 
in tunopen())
o Change the default device permissions to 0600 root:wheel
  (were uucp:dialer)
o Only let root (suser()) change the MTU

This makes it possible for an administrator to open up the
permissions on /dev/tun*, letting non-root programs service
a tun interface.  Co-operation is still required with a
priviledged program that will configure the interface side
of things.
This commit is contained in:
Brian Somers 2001-02-03 00:31:39 +00:00
parent 4b1c62b3f2
commit 8e5db7b9b7
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=71946
1 changed files with 5 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
sys/net/if_tun.c
View file

@ -106,7 +106,7 @@ tun_clone(arg, name, namelen, dev)
if (dev_stdclone(name, NULL, "tun", &u) != 1)
return;
*dev = make_dev(&tun_cdevsw, unit2minor(u),
UID_UUCP, GID_DIALER, 0600, "tun%d", u);
UID_ROOT, GID_WHEEL, 0600, "tun%d", u);
}
@ -189,11 +189,6 @@ tunopen(dev, flag, mode, p)
{
struct ifnet *ifp;
struct tun_softc *tp;
register int error;
error = suser(p);
if (error)
return (error);
tp = dev->si_drv1;
if (!tp) {
@ -333,8 +328,7 @@ tunifioctl(ifp, cmd, data)
break;
case SIOCSIFMTU:
ifp->if_mtu = ifr->ifr_mtu;
TUNDEBUG("%s%d: mtu set\n",
ifp->if_name, ifp->if_unit);
TUNDEBUG("%s%d: mtu set\n", ifp->if_name, ifp->if_unit);
break;
case SIOCADDMULTI:
case SIOCDELMULTI:
@ -449,6 +443,7 @@ tunioctl(dev, cmd, data, flag, p)
struct proc *p;
{
int s;
int error;
struct tun_softc *tp = dev->si_drv1;
struct tuninfo *tunp;
@ -457,6 +452,8 @@ tunioctl(dev, cmd, data, flag, p)
tunp = (struct tuninfo *)data;
if (tunp->mtu < IF_MINMTU)
return (EINVAL);
if (tp->tun_if.if_mtu != tunp->mtu && (error = suser(p)) != 0)
return (error);
tp->tun_if.if_mtu = tunp->mtu;
tp->tun_if.if_type = tunp->type;
tp->tun_if.if_baudrate = tunp->baudrate;