Subj : Re: Not a valid PKT
To   : All
From : Tim Woodland
Date : Thu Jan 19 2023 06:01 am

On Wednesday, January 18, 2023 at 4:20:16 AM UTC-5, Al wrote:
> > Finally, I recursively changed the owner of the Mystic directory and files to 
> > root leaving the sysop group unchanged. This worked, no errors. I now am 
> > trying to determine what the correct permission settings for the directories 
> > and folders should be so that I can run Mystic as the sysop user as the owner 
> < and group so that root is not exposed. Is there a way to give the sysop user 
> > permissions to the ethernet ports so Mystic can use the IP ports when 
> > running as the sysop user?
> I use setcap here to give a server access to ports below 1024. 
> 
> You need to be root (or use sudo) to run this command. 
> 
> sudo setcap 'cap_net_bind_service=+ep' /mystic/mis 
> 
> You can then use getcap to check that mis has the permisions to open those 
> ports. There is a write here on the synchronet wiki. 
> 
> https://wiki.synchro.net/howto:linux_non-root 
> 
> It talks about this and other methods. 
> 
> If you happen to run mis or mutil as root you can end up with these kind of 
> permissions issues so best not to do that. :)
Thank you g00r00 and Al. I appreciate your help and have it working except nodespy.

With /mystic owner as user:user and running mis with "sudo ./mis server", I did see in the node's temp directory that the exported message was owned by the BBS user that owns mystic and not root.  However, I received the errors in the log, "Cannot find 
arctype" and "is not a valid PKT".

After I ran "sudo setcap 'cap_net_bind_service=+ep' /mystic/mis" as suggested by Al, I could start mystic running with "./mis server" and binkp and telnet was able to bind to IPV4.  Mutil is now able to run without errors! This is with /mystic owner as 
user:user not root:user.

Success! Thank you!

The only issue left is nodespy.  When I run nodespy with or without sudo, it is unable to establish a snoop session.  Do you have any suggestions to get this to work?

Gandalf

--- SoupGate-Win32 v1.05
 * Origin: Agency HUB, Dunedin - New Zealand | Fido<>Usenet Gateway (3:770/3)

.