Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.bugs.dist > #1098102
| From | Petr Vorel <petr.vorel@gmail.com> |
|---|---|
| Newsgroups | linux.debian.bugs.dist |
| Subject | Bug#1008281: iputils-ping: Move from capabilities to ICMP socket |
| Date | 2022-03-25 23:00 +0100 |
| Message-ID | <E508p-4bbE-9@gated-at.bofh.it> (permalink) |
| Organization | linux.* mail to news gateway |
Package: iputils-ping Version: 3:20211215-1 Severity: important Dear Maintainer, ping in Debian uses capabilities: $ getcap /usr/bin/ping /usr/bin/ping cap_net_raw=ep # NOTE: cap_net_raw+p would be enough This is required for normal user to be able to open RAW socket. IMHO more secure is to allow users to use ICMP socket. All what is required is to set net.ipv4.ping_group_range: sysctl net.ipv4.ping_group_range="0 2147483647" Not sure how adding sysctl config in /etc/sysctl.d/ for package works in Debian. Kind regards, Petr
Back to linux.debian.bugs.dist | Previous | Next — Next in thread | Find similar | Unroll thread
Bug#1008281: iputils-ping: Move from capabilities to ICMP socket Petr Vorel <petr.vorel@gmail.com> - 2022-03-25 23:00 +0100 Bug#1008281: (no subject) Petr Vorel <petr.vorel@gmail.com> - 2022-03-25 23:10 +0100 Bug#1008281: iputils-ping: Move from capabilities to non-raw ICMP sockets Petr Vorel <petr.vorel@gmail.com> - 2022-03-29 22:30 +0200
csiph-web