- From: Andreas Fink <afink AT global-networks.ch>
- To: "discussion (E-mail)" <discussion AT sctp.de>
- Subject: [SCTP-Discussion] sctplib & MacOS X 10.4
- Date: Tue Sep 20 18:02:01 2005
- List-id: SCTP Discussions <discussion.sctp.de>
Hi folks,
I've got into some issues with an application using sctp and
contacted Apple developer support about it. It wasnt an issue with
SCTP per se. One of the sub-discussions we had was why the
application has to run as root. Its because the application needs
access to the raw socket. The developer technical support gave me an
interesting hint I might want to share with you.
In fact it is running suid root because libsctp requires access to a
raw IP socket.
You could prevent your entire program running as root by using a
setuid root helper tool to create the raw IP socket and then pass
it back to your application using descriptor passing. There's a
library that shows how to do this on our web page.
<http://developer.apple.com/samplecode/MoreAuthSample/
MoreAuthSample.html>
So this is a way around running as root.
BTW, I've nicely packaged sctplib 1.0.4 for MacOS X, now that I hear
that there's a new version, I'll redo my packages (which are for
both, Intel and PowerPC architecture).
Andreas Fink
Global Networks Schweiz AG
------------------------------------------------------------------
Tel: +41-61-6666330 Fax: +41-61-6666334 Mobile: +41-79-2457333
Global Networks Schweiz AG. Clarastrasse 3, 4058 Basel, Switzerland
Web:
http://www.global-networks.ch/
afink AT global-networks.ch
------------------------------------------------------------------
ICQ: 101946485 MSN:
msn1 AT gni.ch
AIM: smsrelay Skype: andreasfink
Yahoo: finkconsulting SMS: +41792457333
PGP9: 0714 DF2B A189 A760 6201 5CBD D040 3E71 4DAF 68BB
Archive powered by MHonArc 2.6.19+.