Package: smokeping
Version: 2.7.3-4.1
Severity: important

Hi folks,

Out of the box, smokeping is configured to use fping, and to ping 
localhost by default.

This won't work without manual intervention because fping requires 
privileges: it's not set suid, and the smokeping system service runs
as user:smokeping (since 2.7.3-2). Fping docs says it needs CAP_NET_RAW
(or the running GID to be in /proc/sys/net/ipv4/ping_group_range)

This worked by accident, I guess, in 2.7.3-1 when the service ran as 
root. I'm not sure about earlier. I had a working install from an older 
version (possibly 2.7.3-1) which has been broken since, and I've 
reproduced the OOTB behaviour after a purge in preparing this bug 
report.

At the very least, I think users should be given a clue about ways to 
solve this themselves, but ideally, the default config would do 
something useful OOTB.

If you add AmbientCapabilities=CAP_NET_RAW to the systemd unit, it can 
invoke fping properly without being root.

Reply via email to