> > > fyi,
> > >
> > > non-root users can do "ipfw list block". shouldn't that return -EPERM ?
> > > i really don't like the users look at my firewall-tables o:-)
> >
> > Change the permissions on /proc/net/ipfw* then
> >
>
> you can't change them. (chmod is ignored).
>
>
Yes, they are hard coded in the source, but you can change that so what's
the problem ?
Bryn
--
PGP key available from any good server \ Overload -- core meltdown sequence
1024/EB275221 1995/09/05 Bryn P. A. Jones | initiated.
<bpaj@gytha.demon.co.uk> (use this key) / This space is intentionally left
fingerprint: 83 AF D8 65 BC 52 74 31 | blank, apart from this text ;-)
67 1A 5F 31 F5 A0 9C 82 \____________________________________