使用setcap给ip命令cap_net_admin+eip权限后，使用普通用户去配置ip无法成功

passwd_test="Huawei12#$"
useradd test
echo Huawei12#$ | passwd --stdin test
cp -ar /etc/sudoers sudoers.bak
echo "test    ALL=(ALL)       ALL" >> /etc/sudoers
echo "test ALL = NOPASSWD: ALL" >> /etc/sudoers

[root@openEuler testEL_ip_route_FUN.002]# su - test219557

Welcome to 5.10.0-54.0.0.27.oe1.aarch64

System information as of time:  Fri Feb 25 11:39:38 AM CST 2022

System load:    0.00
Processes:      148
Memory used:    7.1%
Swap used:      0%
Usage On:       4%
IP address:     9.82.161.153
Users online:   2
To run a command as administrator(user "root"),use "sudo <command>".
[test219557@openEuler ~]$ sudo setcap cap_net_admin+eip /usr/sbin/ip
[test219557@openEuler ~]$ ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: enp3s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    link/ether 52:54:00:18:28:51 brd ff:ff:ff:ff:ff:ff
    inet 9.82.161.153/16 brd 9.82.255.255 scope global dynamic noprefixroute enp3s0
       valid_lft 30075sec preferred_lft 30075sec
    inet6 fe80::5054:ff:fe18:2851/64 scope link noprefixroute
       valid_lft forever preferred_lft forever
3: enp4s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    link/ether 52:54:00:2c:ee:9b brd ff:ff:ff:ff:ff:ff
4: enp5s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    link/ether 52:54:00:65:3c:ab brd ff:ff:ff:ff:ff:ff
5: virbr0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default qlen 1000
    link/ether 52:54:00:fe:ad:4e brd ff:ff:ff:ff:ff:ff
6: virbr0-nic: <BROADCAST,MULTICAST> mtu 1500 qdisc fq_codel state DOWN group default qlen 1000
    link/ether 52:54:00:fe:ad:4e brd ff:ff:ff:ff:ff:ff
[test219557@openEuler ~]$ ip a a 100.100.102.102/16 dev enp4s0
RTNETLINK answers: Operation not permitted
[test219557@openEuler ~]$

[test219557@openEuler ~]$ cat /etc/openEuler-latest
openeulerversion=openEuler-22.03-LTS
compiletime=2022-02-17-07-16-10
gccversion=10.3.1-20210914.5.oe1
kernelversion=5.10.0-54.0.0.27.oe1
openjdkversion=1.8.0.312.b07-11.oe1
[test219557@openEuler ~]$ rpm -qa | grep iproute
iproute-5.15.0-1.oe1.aarch64
[test219557@openEuler ~]$

src-openEuler/iproute
关闭

内容风险标识

评论 (2)

src-openEuler/iproute关闭 .gitee-modal { width: 500px !important; }

内容风险标识