Subject: Re: EPERM on IPV6_JOIN_GROUP on gif?
To: None <tech-net@NetBSD.org>
From: David Young <dyoung@pobox.com>
List: tech-net
Date: 07/01/2004 14:34:18
On Thu, Jul 01, 2004 at 03:24:58PM -0400, Greg Troxel wrote:
> On 1.6 stable from last week (i386), I have gif tunnel (works fine for
> v4 traffic) and I'm trying to run quagga's ripngd.
> I was getting EPERM on the setsockopt call in ripngd/ripng_interface.c:
> 
>     ret = setsockopt (ripng->sock, IPPROTO_IPV6, IPV6_JOIN_GROUP,
> 		      (char *) &mreq, sizeof (mreq));
> 
> Tracing from netinet/ip6_output.c, I see a call to gif_ioctl, which
> has a suser() check.  Making the call as root succeeded.
> 
> Is this just a bug in gif?  Is there some reason why only root should
> be able to join multicast groups?

It sounds to me like a bug in gif.  There is no reason that only root
should be able to join multicast groups.  (FWIW, I run hslsd w/o superuser
privileges, and it joins multicast groups.)

Dave

-- 
David Young             OJC Technologies
dyoung@ojctech.com      Urbana, IL * (217) 278-3933