From a902cf250c27fc3ac97cfadf5e60715605bbbffa Mon Sep 17 00:00:00 2001 From: pbldp <> Date: Wed, 23 Jan 2002 19:43:26 +0000 Subject: [PATCH] Minor enhancements Modified Files: Linux+IPv6-HOWTO.lyx --- .../Peter-Bieringer/Linux+IPv6-HOWTO.lyx | 138 +++++++++++++++++- 1 file changed, 137 insertions(+), 1 deletion(-) diff --git a/LDP/users/Peter-Bieringer/Linux+IPv6-HOWTO.lyx b/LDP/users/Peter-Bieringer/Linux+IPv6-HOWTO.lyx index 6039eb53..91085dbf 100644 --- a/LDP/users/Peter-Bieringer/Linux+IPv6-HOWTO.lyx +++ b/LDP/users/Peter-Bieringer/Linux+IPv6-HOWTO.lyx @@ -49,7 +49,7 @@ on> \layout SGML - Release 0.18.1 2002-01-22 Release 0.18.2 2002-01-23 PB See \begin_inset LatexCommand \ref[revision history]{revision-history} @@ -2217,6 +2217,11 @@ After you've prepared your system for IPv6, you sure want to use IPv6 now help you very fast. \layout Subsection + +\begin_inset LatexCommand \label{program-ping6} + +\end_inset + IPv6 ping \layout Standard @@ -2780,6 +2785,134 @@ In this part of this HOWTO, more client specific issues are mentioned. \end_inset . +\layout Section + +FAQ (IPv6-ready system check) +\layout Subsection + +Using tools +\layout Subsubsection + +Q: Cannot ping6 to link-local addresses +\layout Standard + +Error message: " +\emph on +connect: Invalid argument +\emph default +" +\layout Standard + +Kernel doesn't know, which physical or virtual link you want to use to send + such ICMPv6 packets. + Therefore it displays this error message. +\layout Standard + +Solution: Specify interface like: +\begin_inset Quotes sld +\end_inset + +ping6 +\series bold +-I eth0 +\series default + fe80::2e0:18ff:fe90:9205 +\begin_inset Quotes srd +\end_inset + +, see also +\begin_inset LatexCommand \ref[program ping6 usage]{program-ping6} + +\end_inset + +. +\layout Subsubsection + +Q: Cannot ping6 or traceroute6 as normal user +\layout Standard + +Error message: +\begin_inset Quotes sld +\end_inset + + +\emph on +icmp socket: Operation not permitted +\emph default + +\begin_inset Quotes srd +\end_inset + + +\layout Standard + +This utilities create special ICMPv6 packets and send them out. + This is done by using raw sockets in the kernel. + But raw sockets can only be used by the +\begin_inset Quotes sld +\end_inset + +root +\begin_inset Quotes srd +\end_inset + + user. + Therefore normal users get such error message. +\layout Standard + +Solution: If it's really needed that all users should be able to use this + utilites, you can add the +\begin_inset Quotes sld +\end_inset + +suid +\begin_inset Quotes srd +\end_inset + + bit using +\begin_inset Quotes srd +\end_inset + +chmod u+s /path/to/program +\begin_inset Quotes srd +\end_inset + +, see also +\begin_inset LatexCommand \ref[program ping6 usage]{program-ping6} + +\end_inset + +. + If not all users should be able to, you can change the group of the program + to e.g. + +\begin_inset Quotes sld +\end_inset + +wheel +\begin_inset Quotes srd +\end_inset + +, add this power users to this group and remove the execution bit for other + users using +\begin_inset Quotes sld +\end_inset + +chmod o-rwx /path/to/program +\begin_inset Quotes srd +\end_inset + +. + Or configure +\begin_inset Quotes sld +\end_inset + +sudo +\begin_inset Quotes srd +\end_inset + + for fullfilling your security policy. + \layout Chapter @@ -7949,6 +8082,9 @@ Revision history Releases 0.x \layout Description +0.18.2 2002-01-23/PB: Add a FAQ on the program chapter +\layout Description + 0.18.1 2002-01-23/PB: Move \begin_inset Quotes sld \end_inset