From: Thomas B. Quillinan (t.quillinan at domain cs.ucc.ie)
Date: Mon 17 Jun 2002 - 17:01:08 IST
-----BEGIN PGP SIGNED MESSAGE-----
On Monday 17 June 2002 16:30, Gregory McRandal (ext 722) wrote:
> Hi,
>
> I've managed to botch Kppp (KDE's internet dialler), btw I'm using KDE 3.0
> and RH7.2. Normally when a user runs it they are asked to enter the root
> password to continue. I wanted to have it not ask for the root password
> and just work. So, in accordance with KDEs advice, I created a group
> called dialer containing all the users who should be allowed to use Kppp,
> and called "chgrp root.dialer kppp" and then "chmod 4750 kppp". After doing
> this kpp would not run as a user, It said the kppp was trying to setuid or
> setgid and that GTk+ doesn't allow this. So I called "chgrp root.root
> kppp" and the same error persists. It works fine for root.
>
> Gtk-WARNING **: This process is currently running setuid or
> setgid.
> This is not a supported use of GTK+. You must create a helper
> program instead. For further details, see:
> http://www.gtk.org/setuid.html
> Refusing to initialize GTK+.
>this is due to how RedHat use helper programs to enable users to run admin
programs (assuming they know the root password). if you do a
ls -l /usr/bin/kppp
you will see something like:
lrwxrwxrwx 1 root root 13 May 14 14:00 /usr/bin/kppp ->
consolehelper
console helper is that helper program. TO fix this problem remove this link
and replace it with a link to the _real_ kppp program (which usually resides
in /usr/sbin) and do your chmod on /usr/sbin/kppp.
That should do the job...
hth,
tom.
- --
regards,
Thomas B. Quillinan
Centre for Unified Computing (http://www.cuc.ucc.ie)
Go to http://www.csn.ul.ie/cgi-bin/finger.cgi?tom for my PGP Key
-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.8
iQCVAwUBPQ4Hq/Xqe7monmeBAQHVOAP+Lm7iNikN5edtwvsJuqzGDz6y5yOjGa7w
zQYB6RgS04A7HDO+wIslNV1ne+8tleE+M/R18mKTz2LGTvzb6L6VmZAYGTYfLxh3
UGKAZ7h6Zg0lPN7AEpC3hhm+48zKjG6cgpKOUrrHTut4oORpGJqiwFLdqqHSfcNl
cPfGXAG96Is=
=NDlC
-----END PGP SIGNATURE-----
This archive was generated by hypermail 2.1.6 : Thu 06 Feb 2003 - 13:17:18 GMT