LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 12-06-2004, 07:41 AM   #16
sigsegv
Senior Member
 
Registered: Nov 2004
Location: Third rock from the Sun
Distribution: NetBSD-2, FreeBSD-5.4, OpenBSD-3.[67], RHEL[34], OSX 10.4.1
Posts: 1,197

Rep: Reputation: 47

chown -R <userid> /home/<userid>
chmod 700 /home/<userid>

Can't be much help on the audio stuff though. I'm not familiar with the groups in knoppix.

Yes, most people (I'd go so far as to say all people) with very much *NIX experience at all log in exculsively as a user .... And if they don't, they will once they screw up *bigtime* just because they were root... rm -rf /etc
 
Old 12-06-2004, 12:52 PM   #17
fannymites
Member
 
Registered: Nov 2004
Posts: 242

Original Poster
Rep: Reputation: 30
Thanks for that. Incidentally, I was reading through the readme in my modem driver tar and noticed a bit that I'd missed before. The author was saying that with some distros, it can be difficult to get the modem to run as a user and that this is intentional to make it more secure so not "just anyone" can access the modem. To me this seems most strange, how can it be more secure if you have to log on as root to use it? It goes on to say that normally, adding a user to the dialout group will give access to a modem but with this driver that isn't the case. Unfortunately, the author doesn't actually bother to describe how you are supposed to access the modem.
 
Old 12-06-2004, 12:57 PM   #18
sigsegv
Senior Member
 
Registered: Nov 2004
Location: Third rock from the Sun
Distribution: NetBSD-2, FreeBSD-5.4, OpenBSD-3.[67], RHEL[34], OSX 10.4.1
Posts: 1,197

Rep: Reputation: 47
What kind of modem is it? Maybe start a thread about it in the hopes that someone else has experience with it? Where there's a will, there's a way (most of the time). I know you can get it working, even if it comes down to setting your dialer suid root (though I'd avoid that too if at all possible).
 
Old 12-06-2004, 01:03 PM   #19
fannymites
Member
 
Registered: Nov 2004
Posts: 242

Original Poster
Rep: Reputation: 30
I'm in the process of searching various forums and google at the moment and if that doesn't turn up anything I'll try posting. It's an Intel 536ep modem, it's frustrating that I've had it working as a user once but I can't work out how I did it.
 
Old 12-06-2004, 01:06 PM   #20
sigsegv
Senior Member
 
Registered: Nov 2004
Location: Third rock from the Sun
Distribution: NetBSD-2, FreeBSD-5.4, OpenBSD-3.[67], RHEL[34], OSX 10.4.1
Posts: 1,197

Rep: Reputation: 47
Are you using the Intel driver?
 
Old 12-06-2004, 01:16 PM   #21
fannymites
Member
 
Registered: Nov 2004
Posts: 242

Original Poster
Rep: Reputation: 30
The driver I'm using is from the Intel site, it's the newest version they have and since they don't do a specific driver for Debian/Kanotix/Knoppix I downloaded the source.
 
Old 12-06-2004, 02:01 PM   #22
sigsegv
Senior Member
 
Registered: Nov 2004
Location: Third rock from the Sun
Distribution: NetBSD-2, FreeBSD-5.4, OpenBSD-3.[67], RHEL[34], OSX 10.4.1
Posts: 1,197

Rep: Reputation: 47
Looking at the install file from the v4.60 tarball (Intel-536ep-460.tgz), they specifically talk about security on the modem device, and the method to solve in on a Debian based machine would be exactly the same as the one they go through. You put your user in the group that owns the device (see /etc/group) and chmod the device 660.

The 536ep-inst script has a block in it to deal with a debian system as well (though if /etc/debian_version doesn't exist for some reason it won't run). Here's what it does:

Code:
   if [ -a ./hamregistry.bin ]; then
   {
      mv -f /etc/hamregistry.bin /etc/hamregistry.bak
      cp ./hamregistry.bin /etc/hamregistry.bin
   }
   else
   {
      rm -f /etc/hamregistry.bin
   }
   fi
   echo installing hamregistry, used for persistant storage
   install -o root -g root -m 110 hamregistry /usr/sbin
   echo installing 536ep module
   install -o root -g root -m 664 536ep.o ${CharModDir}/536ep.o
   echo installing 536ep core module
   install -o root -g root -m 664 536epcore.o ${CharModDir}/536epcore.o

   echo debian hamboot rc2.d and rc3.d scripts
   install -o root -g root -m 110 536ep-boot /etc/init.d
   ln -s -f /etc/init.d/536ep-boot /etc/rc2.d/S99536ep-boot
   ln -s -f /etc/init.d/536ep-boot /etc/rc3.d/S99536ep-boot
Maybe that helps?
 
Old 12-06-2004, 03:09 PM   #23
fannymites
Member
 
Registered: Nov 2004
Posts: 242

Original Poster
Rep: Reputation: 30
Thankyou. That was helpful indeed, I can now get the modem to dial-up as user but no web pages will load up. It's very much like everything is being blocked by a firewall but since I've just re-installed I don't have a firewall yet (that I know of).
I'm assuming once connected the user has to be in some other group to actually access the net but I don't know which.
Is there a list anywhere that shows the groups a user should be members of to get a basic working system with sound internet and email access?
Here is a list of groups that my user was already members of after the Knoppix/Kanotix install -
audio
cdrom
dialout
dip
fax
floppy
games
sudo
tape
usb
users
video
voice
 
Old 12-06-2004, 06:19 PM   #24
fannymites
Member
 
Registered: Nov 2004
Posts: 242

Original Poster
Rep: Reputation: 30
Nope, after reboot, no modem again. It looks like all my problems are down to something I mentioned in an earlier post. I mentioned desktop settings weren't being saved after a reboot but it's more than that, any changes I make at all are gone after the reboot.
 
Old 12-07-2004, 07:59 AM   #25
fannymites
Member
 
Registered: Nov 2004
Posts: 242

Original Poster
Rep: Reputation: 30
Right, after much googling, forum searching and gnashing of teeth, I finally managed to sort out most of the problems with the user accounts. Sound is working, I am able to read/write my home folder and I have access to the modem.
Now there is one final thing stopping me running exclusively as a user -
When I try to connect to the internet, the modem responds, dials-up but then disconnects at the last minute with an exit error status 2. I can't see any obvious reason why the modem itself shouldn't connect, all the modem commands appear to be ok so I can only imagine I am not getting access to something else and I don't know what.

[EDIT] Apologies for the cross posting but after posting this I decided it would be better to post in the Networking section.

Last edited by fannymites; 12-07-2004 at 08:02 AM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Full access directory for all users mmowchenko Linux - Newbie 4 11-04-2005 07:15 AM
How to have Full root access at logon omeryasin Linux - General 3 10-29-2005 03:58 AM
Full write access to vfat Rªdical_£D SUSE / openSUSE 2 03-18-2005 03:15 AM
Release full access to NT user ust Linux - Software 0 10-05-2004 08:13 PM
Full FTP Access - Oh No Lucasite Linux - Security 2 03-12-2004 11:27 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 03:40 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration