-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 02/22/2016 09:22 PM, Noah Meyerhans wrote: > On Mon, Feb 22, 2016 at 09:15:37PM +0100, John Paul Adrian Glaubitz > wrote: >> I didn't say you should remove setuid altogether. I just said you >> should use capabilties on Linux by default by setting: >> >> Depends: libcap2-bin [linux-any] > > Recommends are installed by default, so the default on Linux is to > use capabilities. Especially with systemd pulling it in as a hard > requirement.
As I mentioned before, the problem occurs in setups like FAI where Recommends are not enabled by default. I'm aware it works on standard, stand-alone systems. I haven't had the time to re-test this today at work, but I will be following up on this! > iputils-ping only builds for linux kernels. Well, then this part isn't an issue anyway :). > I already explained that it would be a policy violation for > iputils-ping to have a Depends: libcap2-bin. This will change when > libcap2-bin is Priority: important, at which point I'll add the > dependency. Just because systemd is willing to violate policy > doesn't mean I am! ;) Alright, then let's just wait until this has happened! Again, thanks for filing the bug report! Adrian - -- .''`. John Paul Adrian Glaubitz : :' : Debian Developer - glaub...@debian.org `. `' Freie Universitaet Berlin - glaub...@physik.fu-berlin.de `- GPG: 62FF 8A75 84E0 2956 9546 0006 7426 3B37 F5B5 F913 -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJWy286AAoJEHQmOzf1tfkTe+MQAIcf5aaQwxtREO4elmSWUxX8 gfbs0KNCDGCde4imv8zxBcjJBhWvheG0aM65WM/RMj7zBazx5ubUcRXPUR1xjVvu mb7fSr/68P9MbQKAYDn6FUszfycPb47U6PPZmLC9tVp71kbpGe5IQ+cCrtBgG0dx yu5ydzpDq/Y8DK8qkfDpuIrepF3uWdnlKJ5SkWBffBZOJYahes9/kh0sByxaz4Di z3cZ2rXAyexb5FcDGcNl1C9HGkS6vUFDD6a3KpARExl0T9Ve6MuvYM1yTQTWG379 F+eANowp6y5Tfi2rqTfR/K+z2x9aKfnJlkB7XEiRSxwssc989ZXK3ZjPq09wWdGk UdpHZ6OIZi0eZyMV4xkK+3Mv9hfXLkYAUL7zboPIY15NDZWmegNIXAe7CCCn88Ay J4HZiOZYIRsW16pXVF/F8081/2g+Ru2Od1+G7Rp4jE+Zt8+/qmZPpGys3kqbZdYE lnw/ulfaxYnMMIgXdCkjc51ShBCGfm0XGI1etMd7j0Ii4FtMoeNSdAReikqn1UJr OA75zioM2OHyQEYaR83I8TbngVgcwWYMyuzj+qS+yG3o7QLAqmQAnZBaBJbC8uHS qxo6jZFvBJuzNYKFGNwnVPMXXVZwsfVB65ASH2HHIyoA09hARGz6HSgbtME/3o4Q JrXaircc4YHctOzaksgT =B6Ga -----END PGP SIGNATURE-----