Bug 446419 - /etc/sysconfig/network-scripts/ifup-eth: arping not in ordinary path
Summary: /etc/sysconfig/network-scripts/ifup-eth: arping not in ordinary path
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: initscripts
Version: 9
Hardware: All
OS: Linux
low
medium
Target Milestone: ---
Assignee: Bill Nottingham
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2008-05-14 15:19 UTC by Paul Bolle
Modified: 2014-03-17 03:14 UTC (History)
1 user (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2008-08-31 10:37:41 UTC


Attachments (Terms of Use)

Description Paul Bolle 2008-05-14 15:19:40 UTC
Description of problem:
ordinary users can't run etc/sysconfig/network-scripts/ifup-eth (and thus
/sbin/ifup eth?).

Version-Release number of selected component (if applicable):
initscripts-8.76.1-1.i386

How reproducible:
always

Steps to Reproduce:
1. /sbin/ifup eth?
2.
3.
  
Actual results:
/sbin/ifup eth0
/etc/sysconfig/network-scripts/ifup-eth: line 267: arping: command not found
Error, some other host already uses address [...].

Expected results:
No error, interface up.

Additional info:
This is fixable by replacing arping with /sbin/arping in [...]/ifup-eth. If
needed, I'd be happy to provide a (trivial) patch.

However, note that a fix like that would also need some SELinux adjustments:
May 14 17:13:10 [...] kernel: type=1400 audit(1210777990.023:18): avc:  denied 
{ execute } for  pid=9075 comm="ifup-eth" name="arping" dev=dm-0 ino=3633778
scontext=unconfined_u:unconfined_r:usernetctl_t:s0-s0:c0.c1023
tcontext=system_u:object_r:netutils_exec_t:s0 tclass=file
May 14 17:13:12 [...] kernel: type=1400 audit(1210777992.028:21): avc:  denied 
{ execute } for  pid=9124 comm="ifup-eth" name="arping" dev=dm-0 ino=3633778
scontext=unconfined_u:unconfined_r:usernetctl_t:s0-s0:c0.c1023
tcontext=system_u:object_r:netutils_exec_t:s0 tclass=file

Comment 1 Bill Nottingham 2008-05-14 16:38:31 UTC
Are you using USERCTL in this case?

Comment 2 Paul Bolle 2008-05-14 23:50:41 UTC
$ grep USERCTL /etc/sysconfig/network-scripts/ifcfg-eth0 
USERCTL=yes
$ /sbin/ifup eth0
/etc/sysconfig/network-scripts/ifup-eth: line 267: arping: command not found
Error, some other host already uses address [...].


Comment 3 Paul Bolle 2008-08-31 10:37:41 UTC
Can not reproduce anymore. I'm running initscripts-8.76.2-1.i386 now. Do not know what has changed and/or when. I was running "sudo /sbin/ifup eth?" some months now.

Blame SELinux? Blame myself? I'd guess this should be CLOSED/DUNNO.

Comment 4 Bill Nottingham 2008-09-02 18:14:16 UTC
Well, the scripts generally set PATH, so it should just work. In any case, passing the full path shouldn't break anything, so that's what's done in git. Will be changed in rawhide eventually.


Note You need to log in before you can comment on or make changes to this bug.