Opened 12 years ago
Closed 12 years ago
#3264 closed task (fixed)
Traceroute program location
Reported by: | Owned by: | ||
---|---|---|---|
Priority: | normal | Milestone: | 7.3 |
Component: | Book | Version: | SVN |
Severity: | normal | Keywords: | |
Cc: |
Description
For the Inetutils instructions, LFS says to move /usr/bin/traceroute to /sbin, the explanation being that it's the "FHS-compliant place". However, there is no mention of traceroute in the FHS, and the only thing comes close is the description of what programs go into "bin" and "sbin" directories. As traceroute is, by default, installed suid root, it is apparently meant to be run by non-root users, and therefore should go into /usr/bin (or /bin, if it's felt necessary for it to be outside of /usr). Also, http://archive.linuxfromscratch.org/blfs-museum/6.2.0/BLFS-6.2.0/basicnet/netutils.html#traceroute older versions of BLFS specifically note that traceroute should either be kept in /usr/sbin with the suid bit removed, or moved to /usr/bin and stay suid.
Change History (4)
comment:1 by , 12 years ago
comment:2 by , 12 years ago
I took a look at the traceroute version in BLFS. That version has many more features than the one in inetutils and it has been updated recently (2012/12/06). That version installs in /bin with 775 permissions and no suid bits set.
I tested both and the inetutils version does not work without root privileges.
$ ldd /sbin/traceroute linux-gate.so.1 (0xffffe000) libcrypt.so.1 => /lib/libcrypt.so.1 (0xb772a000) libutil.so.1 => /lib/libutil.so.1 (0xb7726000) libresolv.so.2 => /lib/libresolv.so.2 (0xb770d000) libnsl.so.1 => /lib/libnsl.so.1 (0xb76f2000) libc.so.6 => /lib/libc.so.6 (0xb7540000) /lib/ld-linux.so.2 (0xb7777000) $ ldd ./traceroute linux-gate.so.1 (0xffffe000) libm.so.6 => /lib/libm.so.6 (0xb7714000) libc.so.6 => /lib/libc.so.6 (0xb7563000) /lib/ld-linux.so.2 (0xb7759000)
Let's use /bin for consistency.
comment:3 by , 12 years ago
Owner: | changed from | to
---|---|
Status: | new → assigned |
Bruce,
This looks like I updated it in r9130, based on your 1st comment in #2524 (ping6 location).
If you're happy with it, I can just revert the traceroute part of that change.
Ta,
Matt.