Re: [squid-users] ICMP ping fails but Squid still runs

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Mon, 01 Mar 2010 16:16:22 +1300

On Sun, 28 Feb 2010 21:05:18 -0600, Luis Daniel Lucio Quiroz
<luis.daniel.lucio_at_gmail.com> wrote:
> I'm having this
>
> 10/02/28 20:57:53| pinger: Initialising ICMP pinger ...
> 2010/02/28 20:57:53| Icmp4.cc(82) Open: icmp_sock: (1) Operation not
> permitted
> 2010/02/28 20:57:53| pinger: Unable to start ICMP pinger.
> 2010/02/28 20:57:53| Icmp6.cc(122) Open: icmp_sock: (1) Operation not
> permitted
> 2010/02/28 20:57:53| pinger: Unable to start ICMPv6 pinger.
> 2010/02/28 20:57:53| FATAL: pinger: Unable to open any ICMP sockets.
> 2010/02/28 20:57:54| storeLateRelease: released 0 objects
>
> However squid runs, the fact isthat my init.d service is failling
becuase
> RETVAL isnt 0
>
> I did set by hand
> pinger_program /usr/lib64/squid/pinger
> pinger_enable on
>
> and i'm very shure that ping has X atributes, what am I missing?
>
> TIA
>
> LD

I've been struggling with this one myself. It's something about the
privilege levels when run under Squid.
I suspect it's the no_suid() call when starting child helpers in
src/ipc.cc

Amos
Received on Mon Mar 01 2010 - 03:16:26 MST

This archive was generated by hypermail 2.2.0 : Mon Mar 01 2010 - 12:00:07 MST