INTL 3:770/1 3:770/3   
   REPLYADDR tlwoodland@gmail.com   
   REPLYTO 3:770/3.0 UUCP   
   MSGID: ceea5d6e   
   REPLY: 1:153/757.0 df9aec2b   
   PID: SoupGate-Win32 v1.05   
   On Wednesday, January 18, 2023 at 4:20:16 AM UTC-5, Al wrote:   
   > > Finally, I recursively changed the owner of the Mystic directory and files   
   to    
   > > root leaving the sysop group unchanged. This worked, no errors. I now am    
   > > trying to determine what the correct permission settings for the   
   directories    
   > > and folders should be so that I can run Mystic as the sysop user as the   
   owner    
   > < and group so that root is not exposed. Is there a way to give the sysop   
   user    
   > > permissions to the ethernet ports so Mystic can use the IP ports when    
   > > running as the sysop user?   
   > I use setcap here to give a server access to ports below 1024.    
   >    
   > You need to be root (or use sudo) to run this command.    
   >    
   > sudo setcap 'cap_net_bind_service=+ep' /mystic/mis    
   >    
   > You can then use getcap to check that mis has the permisions to open those    
   > ports. There is a write here on the synchronet wiki.    
   >    
   > https://wiki.synchro.net/howto:linux_non-root    
   >    
   > It talks about this and other methods.    
   >    
   > If you happen to run mis or mutil as root you can end up with these kind of    
   > permissions issues so best not to do that. :)   
   Thank you g00r00 and Al. I appreciate your help and have it working except   
   nodespy.   
      
   With /mystic owner as user:user and running mis with "sudo ./mis server", I   
   did see in the node's temp directory that the exported message was owned by   
   the BBS user that owns mystic and not root. However, I received the errors in   
   the log, "Cannot find    
   arctype" and "is not a valid PKT".   
      
   After I ran "sudo setcap 'cap_net_bind_service=+ep' /mystic/mis" as suggested   
   by Al, I could start mystic running with "./mis server" and binkp and telnet   
   was able to bind to IPV4. Mutil is now able to run without errors! This is   
   with /mystic owner as    
   user:user not root:user.   
      
   Success! Thank you!   
      
   The only issue left is nodespy. When I run nodespy with or without sudo, it   
   is unable to establish a snoop session. Do you have any suggestions to get   
   this to work?   
      
   Gandalf   
      
   --- SoupGate-Win32 v1.05   
    * Origin: Agency HUB, Dunedin - New Zealand | Fido<>Usenet Gateway (3:770/3)   
   SEEN-BY: 1/123 15/0 90/1 105/81 106/201 114/705 120/340 123/120 131   
   SEEN-BY: 129/305 153/7715 154/10 218/700 840 220/70 226/17 30 100   
   SEEN-BY: 227/114 229/110 111 112 113 114 206 275 307 317 400 424 426   
   SEEN-BY: 229/428 452 470 550 664 700 250/5 8 266/512 267/800 282/1038   
   SEEN-BY: 292/854 298/25 305/2 3 317/3 320/219 322/757 342/200 396/45   
   SEEN-BY: 460/58 633/280 712/848 770/1 3 100 340 772/210 220 230   
   PATH: 770/3 1 317/3 229/426   
      
|