-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 02/22/2016 03:53 PM, Noah Meyerhans wrote: > On Mon, Feb 22, 2016 at 08:22:50AM +0100, John Paul Adrian Glaubitz > wrote: >> Can we just fix this bug first so that people don't install >> iputils in setups like FAI or debootstrap and keep wondering why >> iputils-ping doesn't work for non-root users? > > Please explain how ping is not usable by non-root users? If > libcap2-bin isn't installed, then ping is installed setuid root as > it always has been.
I'll have to re-test that. Again, this occurred during a FAI installation, that is an automated installation. We had to add libcap2-bin manually in FAI PACKAGES install JESSIE STRETCH BUSTER libcap2-bin iputils-arping iputils-ping as otherwise users would get an error message when trying to run the ping command on Jessie or newer. I will re-test this, maybe this was a previous bug in iputils-ping. I would still highly discourage from using setuid anymore anyway for the well-known security issues it has [1]. I mean, setuid is one of the main reason capabilities were introduced to the Linux kernel in the first place. Cheers, Adrian > [1] https://en.wikipedia.org/wiki/Setuid#Security - -- .''`. John Paul Adrian Glaubitz : :' : Debian Developer - glaub...@debian.org `. `' Freie Universitaet Berlin - glaub...@physik.fu-berlin.de `- GPG: 62FF 8A75 84E0 2956 9546 0006 7426 3B37 F5B5 F913 -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJWyyLAAAoJEHQmOzf1tfkTaekQAJ+uNfZWrJlkgnnNZ+NH74OY V3jwEAWglPorNEFPaezw0ASlTqYB3p5ibx6OkUKszXI6COeCwpSL/fpgAw7n2zTx nJsHkVf+bCdbKa5hl975xTwctfC86pfF+EL1/tXrBFxtXx5PrfBK3B/CtzCZ1u6E cujAu2rC6g2fNrbjCwZFMJvc+3IbxVptMINd1w9humq6FmUu/nXyUUpHtMly73j3 zVcxnl7C1vW9lSTsdLXfPd+3wFrQwobWeDJeTn3z9OC7ljrDRE2y/2/L1f5OBrr7 rJuDpA47Lgv6gD5wXOKwAzQgoAFz0Cs11P9NsdGa82yiYmiOIZvpeOTt1AZSnBmm Ulmnx9ABlEOS4sLjJ74pulpT8HqAaAKwUnz3CNnfy8/qIKgbVvHT1Xr1XydKz+Fs TrK+qhsLX536nSzyO8X3NC/+Fzlnu4u+QI36TlAoqbfikXjAj1dUoemAg1c9tCMM sJH55A6Odlv61XzJQHlNPPBBnkU17B+3rq/sIJkSpYetV5JJwO84+f7VqkOIMMlG d8I5HGp3q00F7x386ceS7dcGGC1NzKsMEhhD3DbBBbx5pO5R05gwqrQiqfHPlCS2 XYEGVafgOs9mA0EyxtFFTNRVEaY+yH/bE92c1hHxkqpFFviU3WWe0/AeowTA3iN+ jc5OOa3NbyXqFZkYtwR7 =s3Ni -----END PGP SIGNATURE-----
