Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Focus-Linux
[Top] [All Lists]

Re: How to check UID of process on the other side of local TCP/UDP conne

Subject: Re: How to check UID of process on the other side of local TCP/UDP connection
Date: Tue, 28 Nov 2006 22:29:34 -0800
On Monday 27 November 2006 12:06, Vladimir Mitiouchev wrote:
On 11/24/06, rainmailbox2001-ola@yahoo.ca <rainmailbox2001-ola@yahoo.ca> 
wrote:
Do you have any ideas how this local
authentication can be achieved in some
different way?

identd
fstat (BSD)
lsof(Linux)

Unix sockets (unless of course Unix sockets are
the only good way to
resolve my problems).

SCM_CREDS (BSD)
SO_PEERCRED (Linux)
SO_PEERCRED isn't supported on HP-UX 11i for PA-RISC, at least. I think there 
are some hoops to jump through in using SCM_CREDS. This may have all been 
resolved for HP-UX versions for Itanic, though. I have no idea what might be 
involved on AIX.

I think the most portable solution (O.P. wants portability across all modern 
Unices) would be via the OpenSSL libs. There are vendor supported packages 
available for Solaris, HP-UX, and AIX--probably pretty much the last of the 
commercial Unices he has to worry about.

As the O.P. needs hundreds of connections per second, this might be too 
expensive. But it would probably keep his porting work to a minimum.
-- 
Greg Metcalfe

<Prev in Thread] Current Thread [Next in Thread>