Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.user > #209454
| From | "Thomas Schmitt" <scdbackup@gmx.net> |
|---|---|
| Newsgroups | linux.debian.user |
| Subject | Re: Ping as normal user (Was: Why /usr/sbin is not in my root $PATH ?) |
| Date | 2019-05-31 14:30 +0200 |
| Message-ID | <y3OPw-37U-9@gated-at.bofh.it> (permalink) |
| References | <y3NA5-2qG-5@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
Hi,
i wrote:
> > Currently the Default User depends on assumptions about local package
> > management which are not obviously related to security.
> > That's a future pitfall which just needs its unintentional cover removed.
Reco wrote:
> The way I see it, the "problematic" package got that Important priority
> already. A potential pitfall is closed.
The priority in debian/control (and thus .dsc) is scheduled on salsa to be
lowered to "optional" by the next package release.
Whatever, the priority is not the problem with security. The lack of
dependency of iputils-ping on libcap2-bin is the problem.
This lack was justified by policy as of 2016. Soon later the priority of
libcap2-bin was raised to "important", but iputils-ping never made use of
this move.
> Replacing a working fallback mechanism with one-size-fits-all "everyone
> are using ext4 on amd64 and Linux" is hardly an improvement.
The proposal in the bug report would not disable the fallback mechanism
for situations where it is needed. It would only make sure that capable
kernels and filesystems would be able use upstream improvements of iptools.
The installation code in
https://sources.debian.org/src/iputils/3:20180629-2/debian/iputils-ping.postinst
adapts itself to effective success of an attempt to set capabilities:
if command -v setcap > /dev/null; then
if setcap cap_net_raw+ep /bin/ping; then
chmod u-s /bin/ping
else
echo "Setcap failed on /bin/ping, falling back to setuid" >&2
chmod u+s /bin/ping
fi
else
echo "Setcap is not installed, falling back to setuid" >&2
chmod u+s /bin/ping
fi
Safe for Default Users.
My best theory for the problem reported in bug 780721 that a normal user
cannot ping, is that setuid was disabled by mount -o nosuid or -o owner
and that setcap did not work because of his sparse installation.
Have a nice day :)
Thomas
Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Why /usr/sbin is not in my root $PATH ? Pierre Couderc <pierre@couderc.eu> - 2019-02-21 09:10 +0100
Re: Why /usr/sbin is not in my root $PATH ? Reco <recoverym4n@enotuniq.net> - 2019-02-21 09:20 +0100
Re: Why /usr/sbin is not in my root $PATH ? Pierre Couderc <pierre@couderc.eu> - 2019-02-21 09:40 +0100
Re: Why /usr/sbin is not in my root $PATH ? Greg Wooledge <wooledg@eeg.ccf.org> - 2019-02-21 14:30 +0100
Re: Why /usr/sbin is not in my root $PATH ? Reco <recoverym4n@enotuniq.net> - 2019-02-21 14:40 +0100
Re: Why /usr/sbin is not in my root $PATH ? Reco <recoverym4n@enotuniq.net> - 2019-02-21 19:20 +0100
Re: Why /usr/sbin is not in my root $PATH ? ghe <ghe@slsware.net> - 2019-02-21 19:40 +0100
Re: Why /usr/sbin is not in my root $PATH ? Greg Wooledge <wooledg@eeg.ccf.org> - 2019-02-21 20:00 +0100
Re: Why /usr/sbin is not in my root $PATH ? ghe <ghe@slsware.net> - 2019-02-21 21:10 +0100
Re: Why /usr/sbin is not in my root $PATH ? Ric Moore <wayward4now@gmail.com> - 2019-02-21 21:40 +0100
Re: Why /usr/sbin is not in my root $PATH ? Brad Rogers <brad@fineby.me.uk> - 2019-02-21 14:40 +0100
Re: Why /usr/sbin is not in my root $PATH ? Greg Wooledge <wooledg@eeg.ccf.org> - 2019-02-21 14:40 +0100
Re: Why /usr/sbin is not in my root $PATH ? Brad Rogers <brad@fineby.me.uk> - 2019-02-21 14:50 +0100
Re: Why /usr/sbin is not in my root $PATH ? Greg Wooledge <wooledg@eeg.ccf.org> - 2019-02-21 17:30 +0100
Re: Why /usr/sbin is not in my root $PATH ? Reco <recoverym4n@enotuniq.net> - 2019-02-21 18:20 +0100
Re: Why /usr/sbin is not in my root $PATH ? Greg Wooledge <wooledg@eeg.ccf.org> - 2019-02-21 18:50 +0100
Re: Why /usr/sbin is not in my root $PATH ? Andrei POPESCU <andreimpopescu@gmail.com> - 2019-05-26 10:50 +0200
Re: Why /usr/sbin is not in my root $PATH ? ghe <ghe@slsware.net> - 2019-02-21 19:20 +0100
Re: Why /usr/sbin is not in my root $PATH ? Reco <recoverym4n@enotuniq.net> - 2019-02-21 19:30 +0100
Re: Why /usr/sbin is not in my root $PATH ? ghe <ghe@slsware.net> - 2019-05-26 15:50 +0200
Re: Why /usr/sbin is not in my root $PATH ? Andy Smith <andy@strugglers.net> - 2019-05-27 04:20 +0200
Re: Why /usr/sbin is not in my root $PATH ? Andrei POPESCU <andreimpopescu@gmail.com> - 2019-05-27 07:20 +0200
Re: Why /usr/sbin is not in my root $PATH ? Andy Smith <andy@strugglers.net> - 2019-05-27 07:30 +0200
Re: Ping as normal user (Was: Why /usr/sbin is not in my root $PATH ?) Jason <electron@emypeople.net> - 2019-05-30 00:00 +0200
Re: Ping as normal user (Was: Why /usr/sbin is not in my root $PATH ?) Andy Smith <andy@strugglers.net> - 2019-05-30 01:50 +0200
Re: Ping as normal user (Was: Why /usr/sbin is not in my root $PATH ?) Cindy Sue Causey <butterflybytes@gmail.com> - 2019-05-30 03:50 +0200
Re: Ping as normal user (Was: Why /usr/sbin is not in my root $PATH ?) Andy Smith <andy@strugglers.net> - 2019-05-30 04:50 +0200
Re: Ping as normal user (Was: Why /usr/sbin is not in my root $PATH ?) Reco <recoverym4n@enotuniq.net> - 2019-05-30 08:10 +0200
Re: Ping as normal user (Was: Why /usr/sbin is not in my root $PATH ?) Andy Smith <andy@strugglers.net> - 2019-05-30 23:30 +0200
Re: Ping as normal user Stefan Monnier <monnier@iro.umontreal.ca> - 2019-05-31 05:00 +0200
Re: Ping as normal user rhkramer@gmail.com - 2019-05-31 13:20 +0200
Re: Ping as normal user Pascal Hambourg <pascal@plouf.fr.eu.org> - 2019-05-31 13:30 +0200
Gmail problems (was Re: Ping as normal user) rhkramer@gmail.com - 2019-05-31 15:10 +0200
Re: Gmail problems (was Re: Ping as normal user) mick crane <mick.crane@gmail.com> - 2019-05-31 15:40 +0200
Re: Gmail problems (was Re: Ping as normal user) Brian <ad44@cityscape.co.uk> - 2019-05-31 21:50 +0200
Re: Ping as normal user (Was: Why /usr/sbin is not in my root $PATH ?) Gene Heskett <gheskett@shentel.net> - 2019-05-30 05:30 +0200
Re: Ping as normal user (Was: Why /usr/sbin is not in my root $PATH ?) Andrei POPESCU <andreimpopescu@gmail.com> - 2019-05-31 08:40 +0200
Re: Ping as normal user (Was: Why /usr/sbin is not in my root $PATH ?) Pascal Hambourg <pascal@plouf.fr.eu.org> - 2019-05-31 11:50 +0200
Re: Ping as normal user (Was: Why /usr/sbin is not in my root $PATH ?) Greg Wooledge <wooledg@eeg.ccf.org> - 2019-05-31 15:00 +0200
Re: Ping as normal user (Was: Why /usr/sbin is not in my root $PATH ?) Andrei POPESCU <andreimpopescu@gmail.com> - 2019-06-01 07:50 +0200
Re: Ping as normal user (Was: Why /usr/sbin is not in my root $PATH ?) Curt <curty@free.fr> - 2019-05-30 11:20 +0200
Re: Ping as normal user (Was: Why /usr/sbin is not in my root $PATH ?) Greg Wooledge <wooledg@eeg.ccf.org> - 2019-05-30 14:40 +0200
Re: Ping as normal user (Was: Why /usr/sbin is not in my root $PATH ?) Curt <curty@free.fr> - 2019-05-30 15:10 +0200
Re: Ping as normal user (Was: Why /usr/sbin is not in my root $PATH ?) Greg Wooledge <wooledg@eeg.ccf.org> - 2019-05-30 15:20 +0200
Re: Ping as normal user (Was: Why /usr/sbin is not in my root $PATH ?) Curt <curty@free.fr> - 2019-05-30 15:30 +0200
Re: Ping as normal user (Was: Why /usr/sbin is not in my root $PATH ?) Greg Wooledge <wooledg@eeg.ccf.org> - 2019-05-30 16:30 +0200
Re: Ping as normal user (Was: Why /usr/sbin is not in my root $PATH ?) Reco <recoverym4n@enotuniq.net> - 2019-05-30 16:40 +0200
Re: Ping as normal user (Was: Why /usr/sbin is not in my root $PATH ?) Greg Wooledge <wooledg@eeg.ccf.org> - 2019-05-30 17:10 +0200
Re: Ping as normal user (Was: Why /usr/sbin is not in my root $PATH ?) Reco <recoverym4n@enotuniq.net> - 2019-05-30 17:50 +0200
Re: Ping as normal user (Was: Why /usr/sbin is not in my root $PATH ?) Andrei POPESCU <andreimpopescu@gmail.com> - 2019-05-31 09:00 +0200
Re: Ping as normal user (Was: Why /usr/sbin is not in my root $PATH ?) "Thomas Schmitt" <scdbackup@gmx.net> - 2019-05-31 09:20 +0200
Re: Ping as normal user (Was: Why /usr/sbin is not in my root $PATH ?) Reco <recoverym4n@enotuniq.net> - 2019-05-31 10:30 +0200
Re: Ping as normal user (Was: Why /usr/sbin is not in my root $PATH ?) "Thomas Schmitt" <scdbackup@gmx.net> - 2019-05-31 12:20 +0200
Re: Ping as normal user (Was: Why /usr/sbin is not in my root $PATH ?) Reco <recoverym4n@enotuniq.net> - 2019-05-31 13:10 +0200
Re: Ping as normal user (Was: Why /usr/sbin is not in my root $PATH ?) "Thomas Schmitt" <scdbackup@gmx.net> - 2019-05-31 14:30 +0200
Re: Ping as normal user Sven Hartge <sven@svenhartge.de> - 2019-05-30 17:50 +0200
Re: Ping as normal user (Was: Why /usr/sbin is not in my root $PATH ?) Reco <recoverym4n@enotuniq.net> - 2019-05-30 16:30 +0200
Re: Ping as normal user (Was: Why /usr/sbin is not in my root $PATH ?) "Thomas Schmitt" <scdbackup@gmx.net> - 2019-05-30 17:10 +0200
Re: Ping as normal user (Was: Why /usr/sbin is not in my root $PATH ?) Curt <curty@free.fr> - 2019-05-30 18:10 +0200
Re: Ping as normal user (Was: Why /usr/sbin is not in my root $PATH ?) "Thomas Schmitt" <scdbackup@gmx.net> - 2019-05-30 18:40 +0200
Re: Ping as normal user (Was: Why /usr/sbin is not in my root $PATH ?) Jason <electron@emypeople.net> - 2019-05-31 16:10 +0200
Re: Ping as normal user (Was: Why /usr/sbin is not in my root $PATH ?) Andy Smith <andy@strugglers.net> - 2019-05-31 16:40 +0200
Re: Why /usr/sbin is not in my root $PATH ? Andrei POPESCU <andreimpopescu@gmail.com> - 2019-05-26 10:50 +0200
Re: Why /usr/sbin is not in my root $PATH ? Jonathan de Boyne Pollard <J.deBoynePollard-newsgroups@NTLWorld.COM> - 2019-02-21 17:40 +0100
Re: Why /usr/sbin is not in my root $PATH ? Mart van de Wege <mvdwege@gmail.com> - 2019-02-23 15:50 +0100
Re: Why /usr/sbin is not in my root $PATH ? Tixy <tixy@yxit.co.uk> - 2019-02-23 17:40 +0100
Re: Why /usr/sbin is not in my root $PATH ? John Hasler <jhasler@newsguy.com> - 2019-02-23 18:30 +0100
Re: Why /usr/sbin is not in my root $PATH ? Mart van de Wege <mvdwege@gmail.com> - 2019-02-24 09:50 +0100
Re: Why /usr/sbin is not in my root $PATH ? Curt <curty@free.fr> - 2019-02-24 10:00 +0100
[OT] Re: Why /usr/sbin is not in my root $PATH ? David Wright <deblis@lionunicorn.co.uk> - 2019-02-24 16:40 +0100
Re: [OT] Re: Why /usr/sbin is not in my root $PATH ? Martin Smith <tech@smithproductions.co.uk> - 2019-02-24 19:10 +0100
Re: [OT] Re: Why /usr/sbin is not in my root $PATH ? David Wright <deblis@lionunicorn.co.uk> - 2019-02-24 20:20 +0100
csiph-web