Find the answer to your Linux question:
Results 1 to 3 of 3
I'm wondering if there's a way to use 'suid' for the Cisco vpnclient. I see discussion on the web regarding versions that had the bit set by default. I'm using ...
  1. 05-07-2006 #1
    pajamabama
    pajamabama is offline
    Linux Newbie pajamabama's Avatar
    Join Date
    Jul 2005
    Location
    In another time's forgotten space
    Posts
    150

    vpnclient suid



    I'm wondering if there's a way to use 'suid' for the Cisco vpnclient. I see discussion on the web regarding versions that had the bit set by default. I'm using v4.8.00 (0490), and when I try to set either the suid or sgid bits I get the following error:

    Code:
    vpnclient cannot have setuid or setgid permissions.
    Has this been disabled by Cisco as a security issue or something?


    When I run it as user I get:

    Code:
    Cisco Systems VPN Client Version 4.8.00 (0490)
Copyright (C) 1998-2005 Cisco Systems, Inc. All Rights Reserved.
Client Type(s): Linux
Running on: Linux 2.6.11.4-21.11-default #1 Thu Feb 2 20:54:26 UTC 2006 i686
Config file directory: /etc/opt/cisco-vpnclient

privsep: unable to drop privileges: group set failed.
The application was unable to communicate with the VPN sub-system.
    HP Pavilion dv6000t
    Intel Centrino Duo 2.0GHz
    nVidia GeForce Go 7400
    Fedora 10

    ----------------------
    The real question is what time is it and why the hell am I still screwing around with my computer?
  2. 12-05-2006 #2
    ah_lam
    ah_lam is offline
    Just Joined!
    Join Date
    Dec 2006
    Posts
    5
    You should set the suid bit of cvpnd instead of vpnclient:
    # chmod 4111 /opt/cisco-vpnclient/bin/cvpnd

    --
    My Blog: http://ahlamnote.blogspot.com/
  3. 04-13-2007 #3
    jaysonbrake
    jaysonbrake is offline
    Just Joined!
    Join Date
    Apr 2007
    Posts
    1
    I got the same message after installing the client on OpenSUSE 10.2 and trying to start the client. Running 'chmod 4111 /opt/cisco-vpnclient/bin/cvpnd' (as root) resolved the problem. Thanks.
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules