commit:     c525e93401eb002d03c3ee6111f8cde0bb67480b
Author:     Mike Gilbert <floppym <AT> gentoo <DOT> org>
AuthorDate: Thu Feb  5 23:53:44 2026 +0000
Commit:     Mike Gilbert <floppym <AT> gentoo <DOT> org>
CommitDate: Thu Feb  5 23:53:44 2026 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=c525e934

net-misc/iputils: add 'suid' USE flag

ping is mostly functional without privileges. We can leave the
decision to enable filecaps/suid to the sysadmin.

Bug: https://bugs.gentoo.org/962112
Signed-off-by: Mike Gilbert <floppym <AT> gentoo.org>

 .../{iputils-20250605-r2.ebuild => iputils-20250605-r3.ebuild}    | 8 ++++----
 net-misc/iputils/iputils-99999999.ebuild                          | 8 ++++----
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/net-misc/iputils/iputils-20250605-r2.ebuild 
b/net-misc/iputils/iputils-20250605-r3.ebuild
similarity index 95%
rename from net-misc/iputils/iputils-20250605-r2.ebuild
rename to net-misc/iputils/iputils-20250605-r3.ebuild
index 1e55674d7085..81ad0dce0493 100644
--- a/net-misc/iputils/iputils-20250605-r2.ebuild
+++ b/net-misc/iputils/iputils-20250605-r3.ebuild
@@ -36,7 +36,7 @@ LICENSE="
        tracepath? ( GPL-2+ )
 "
 SLOT="0"
-IUSE="+arping +caps clockdiff doc idn nls test tracepath"
+IUSE="+arping +caps clockdiff doc idn nls +suid test tracepath"
 REQUIRED_USE="filecaps? ( caps )"
 RESTRICT="!test? ( test )"
 
@@ -119,14 +119,14 @@ src_install() {
 
        # See build-aux/setcap-setuid.sh
        # For suidctl compat: enable suid in src_install and remove it if fcaps 
is successful
-       fperms u+s /usr/bin/ping
+       use suid && fperms u+s /usr/bin/ping
        FILECAPS=( -M u-s cap_net_admin,cap_net_raw+p usr/bin/ping )
        if use arping; then
-               fperms u+s /usr/bin/arping
+               use suid && fperms u+s /usr/bin/arping
                FILECAPS+=( -- -M u-s cap_net_raw+p usr/bin/arping )
        fi
        if use clockdiff; then
-               fperms u+s /usr/bin/clockdiff
+               use suid && fperms u+s /usr/bin/clockdiff
                FILECAPS+=( -- -M u-s cap_net_raw,cap_sys_nice+ep 
usr/bin/clockdiff )
        fi
 

diff --git a/net-misc/iputils/iputils-99999999.ebuild 
b/net-misc/iputils/iputils-99999999.ebuild
index 43f9ea46b947..f91df042fb91 100644
--- a/net-misc/iputils/iputils-99999999.ebuild
+++ b/net-misc/iputils/iputils-99999999.ebuild
@@ -36,7 +36,7 @@ LICENSE="
        tracepath? ( GPL-2+ )
 "
 SLOT="0"
-IUSE="+arping +caps clockdiff doc idn nls test tracepath"
+IUSE="+arping +caps clockdiff doc idn nls +suid test tracepath"
 REQUIRED_USE="filecaps? ( caps )"
 RESTRICT="!test? ( test )"
 
@@ -115,14 +115,14 @@ src_install() {
 
        # See build-aux/setcap-setuid.sh
        # For suidctl compat: enable suid in src_install and remove it if fcaps 
is successful
-       fperms u+s /usr/bin/ping
+       use suid && fperms u+s /usr/bin/ping
        FILECAPS=( -M u-s cap_net_admin,cap_net_raw+p usr/bin/ping )
        if use arping; then
-               fperms u+s /usr/bin/arping
+               use suid && fperms u+s /usr/bin/arping
                FILECAPS+=( -- -M u-s cap_net_raw+p usr/bin/arping )
        fi
        if use clockdiff; then
-               fperms u+s /usr/bin/clockdiff
+               use suid && fperms u+s /usr/bin/clockdiff
                FILECAPS+=( -- -M u-s cap_net_raw,cap_sys_nice+ep 
usr/bin/clockdiff )
        fi
 

Reply via email to