search for: tunsetown

...etwork. It works well (haven't tested latency sensitive traffic, eg voip, yet), but only when logging in as root. I've created a first draft patch against 4.3_p2 that compiles cleanly on linux, and allows remote users to establish tun/tap vpn as unprivileged users. This is done via the TUNSETOWNER ioctl(). This patch is proof of concept only. It does not add the capability to the other *nixs, has not been tested for security, and needs to be cleaned up. I'm willing to do that if there is interest in adding this capability to openssh... ------- You are receiving this mail becau...

..."sudo /etc/init.d/net.tap0 restart" Then, configure the tap interface on the client side. So far, 1.) the patch applies cleanly to 4.3_p2 2.) compiles cleanly on a Linux x86 system 3.) successfully permits non-root users to login, then access the tun interface (via 'ioctl(fd, TUNSETOWNER, uid)') To be done: 1.) propagate the change to the other platforms to clean up the "#if defined(...)'s" 2.) verify no bugs have been introduced. 3.) verify I'm not smoking crack. :) This is my first attempt at modifying openssh, so I'm sure I've screwed up...

...FF_TAP | IFF_NO_PI | IFF_ONE_QUEUE, + (unsigned int __user*)argp); + } + if (!tun) return -EBADFD; diff -r 8414a579e106 include/linux/if_tun.h --- a/include/linux/if_tun.h Tue Apr 22 07:36:45 2008 +1000 +++ b/include/linux/if_tun.h Tue Apr 22 07:37:33 2008 +1000 @@ -42,6 +42,7 @@ #define TUNSETOWNER _IOW('T', 204, int) #define TUNSETLINK _IOW('T', 205, int) #define TUNSETGROUP _IOW('T', 206, int) +#define TUNGETFEATURES _IOR('T', 207, unsigned int) /* TUNSETIFF ifr flags */ #define IFF_TUN 0x0001

...FF_TAP | IFF_NO_PI | IFF_ONE_QUEUE, + (unsigned int __user*)argp); + } + if (!tun) return -EBADFD; diff -r 8414a579e106 include/linux/if_tun.h --- a/include/linux/if_tun.h Tue Apr 22 07:36:45 2008 +1000 +++ b/include/linux/if_tun.h Tue Apr 22 07:37:33 2008 +1000 @@ -42,6 +42,7 @@ #define TUNSETOWNER _IOW('T', 204, int) #define TUNSETLINK _IOW('T', 205, int) #define TUNSETGROUP _IOW('T', 206, int) +#define TUNGETFEATURES _IOR('T', 207, unsigned int) /* TUNSETIFF ifr flags */ #define IFF_TUN 0x0001

...FF_TAP | IFF_NO_PI | IFF_ONE_QUEUE, + (unsigned int __user*)argp); + } + if (!tun) return -EBADFD; diff -r 8414a579e106 include/linux/if_tun.h --- a/include/linux/if_tun.h Tue Apr 22 07:36:45 2008 +1000 +++ b/include/linux/if_tun.h Tue Apr 22 07:37:33 2008 +1000 @@ -42,6 +42,7 @@ #define TUNSETOWNER _IOW('T', 204, int) #define TUNSETLINK _IOW('T', 205, int) #define TUNSETGROUP _IOW('T', 206, int) +#define TUNGETFEATURES _IOR('T', 207, unsigned int) /* TUNSETIFF ifr flags */ #define IFF_TUN 0x0001

...FF_TAP | IFF_NO_PI | IFF_ONE_QUEUE, + (unsigned int __user*)argp); + } + if (!tun) return -EBADFD; diff -r 8414a579e106 include/linux/if_tun.h --- a/include/linux/if_tun.h Tue Apr 22 07:36:45 2008 +1000 +++ b/include/linux/if_tun.h Tue Apr 22 07:37:33 2008 +1000 @@ -42,6 +42,7 @@ #define TUNSETOWNER _IOW('T', 204, int) #define TUNSETLINK _IOW('T', 205, int) #define TUNSETGROUP _IOW('T', 206, int) +#define TUNGETFEATURES _IOR('T', 207, unsigned int) /* TUNSETIFF ifr flags */ #define IFF_TUN 0x0001