On Mon, Feb 22, 2016 at 08:22:50AM +0100, John Paul Adrian Glaubitz wrote:
> Can we just fix this bug first so that people don't install iputils
> in setups like FAI or debootstrap and keep wondering why iputils-ping
> doesn't work for non-root users?

Please explain how ping is not usable by non-root users? If libcap2-bin
isn't installed, then ping is installed setuid root as it always has
been.

The relevant code from postinst:

    if command -v setcap > /dev/null; then
        if setcap cap_net_raw+ep /bin/ping; then
            chmod u-s /bin/ping
        else
            echo "Setcap failed on /bin/ping, falling back to setuid" >&2
            chmod u+s /bin/ping
        fi
    else
        echo "Setcap is not installed, falling back to setuid" >&2
        chmod u+s /bin/ping
    fi

Attachment: signature.asc
Description: Digital signature

Reply via email to