Control: reassign -1 cdimage.debian.org On Sat, Jul 30, 2016 at 10:12:13AM +0000, Askar Safin wrote: > I downloaded Debian Live from this link: > http://cdimage.debian.org/debian-cd/current-live/amd64/iso-hybrid/debian-live-8.5.0-amd64-kde-desktop.iso > I booted into this KDE live system, opened Konsole terminal emulator, typed > "ping debian.org" (as non-root) into it and saw: > "ping: icmp open socket: Operation not permitted". > "sudo ping debian.org" works.
ping uses Linux capabilities(7) to work as a non-suid binary. What seems to be happening is that the initial base installation performed by debootstrap is done on a filesystem that supports capabilities, but then the capabilities are lost when the files are copied to the CD image filesystem. I'm not sure if that's because the target filesystem doesn't support capabilities or that the process of copying fails to preserve them. I'm re-assigning this to the cdimage.debian.org team so they can investigate. noah
signature.asc
Description: PGP signature
