Minor enhancements

Modified Files:
 	Linux+IPv6-HOWTO.lyx
This commit is contained in:
pbldp 2002-01-23 19:43:26 +00:00
parent e291359957
commit a902cf250c
1 changed files with 137 additions and 1 deletions

View File

@ -49,7 +49,7 @@ on>
<revhistory>
\layout SGML
<revision> <revnumber>Release 0.18.1</revnumber> <date>2002-01-22</date> <authorin
<revision> <revnumber>Release 0.18.2</revnumber> <date>2002-01-23</date> <authorin
itials>PB</authorinitials> <revremark>See
\begin_inset LatexCommand \ref[revision history]{revision-history}
@ -2217,6 +2217,11 @@ After you've prepared your system for IPv6, you sure want to use IPv6 now
help you very fast.
\layout Subsection
\begin_inset LatexCommand \label{program-ping6}
\end_inset
IPv6 ping
\layout Standard
@ -2780,6 +2785,134 @@ In this part of this HOWTO, more client specific issues are mentioned.
\end_inset
.
\layout Section
FAQ (IPv6-ready system check)
\layout Subsection
Using tools
\layout Subsubsection
Q: Cannot ping6 to link-local addresses
\layout Standard
Error message: "
\emph on
connect: Invalid argument
\emph default
"
\layout Standard
Kernel doesn't know, which physical or virtual link you want to use to send
such ICMPv6 packets.
Therefore it displays this error message.
\layout Standard
Solution: Specify interface like:
\begin_inset Quotes sld
\end_inset
ping6
\series bold
-I eth0
\series default
fe80::2e0:18ff:fe90:9205
\begin_inset Quotes srd
\end_inset
, see also
\begin_inset LatexCommand \ref[program ping6 usage]{program-ping6}
\end_inset
.
\layout Subsubsection
Q: Cannot ping6 or traceroute6 as normal user
\layout Standard
Error message:
\begin_inset Quotes sld
\end_inset
\emph on
icmp socket: Operation not permitted
\emph default
\begin_inset Quotes srd
\end_inset
\layout Standard
This utilities create special ICMPv6 packets and send them out.
This is done by using raw sockets in the kernel.
But raw sockets can only be used by the
\begin_inset Quotes sld
\end_inset
root
\begin_inset Quotes srd
\end_inset
user.
Therefore normal users get such error message.
\layout Standard
Solution: If it's really needed that all users should be able to use this
utilites, you can add the
\begin_inset Quotes sld
\end_inset
suid
\begin_inset Quotes srd
\end_inset
bit using
\begin_inset Quotes srd
\end_inset
chmod u+s /path/to/program
\begin_inset Quotes srd
\end_inset
, see also
\begin_inset LatexCommand \ref[program ping6 usage]{program-ping6}
\end_inset
.
If not all users should be able to, you can change the group of the program
to e.g.
\begin_inset Quotes sld
\end_inset
wheel
\begin_inset Quotes srd
\end_inset
, add this power users to this group and remove the execution bit for other
users using
\begin_inset Quotes sld
\end_inset
chmod o-rwx /path/to/program
\begin_inset Quotes srd
\end_inset
.
Or configure
\begin_inset Quotes sld
\end_inset
sudo
\begin_inset Quotes srd
\end_inset
for fullfilling your security policy.
\layout Chapter
@ -7949,6 +8082,9 @@ Revision history
Releases 0.x
\layout Description
0.18.2 2002-01-23/PB: Add a FAQ on the program chapter
\layout Description
0.18.1 2002-01-23/PB: Move
\begin_inset Quotes sld
\end_inset