From: Wenzong Fan <wenzong....@windriver.com> When ping is installed with capabilities instead of being marked setuid, then the ping_t domain needs to be allowed to getcap/setcap.
This patch was backported from upstream. The following changes since commit 271955d346f305b196f069d9dc46db16c43678de: refpolicy: fix real path for swapoff (2014-01-28 15:20:19 +0800) are available in the git repository at: git://git.pokylinux.org/poky-contrib wenzong/fix-ping http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=wenzong/fix-ping Wenzong Fan (1): refpolicy: Allow ping to get/set capabilities .../Allow-ping-to-get-set-capabilities.patch | 32 ++++++++++++++++++++ .../refpolicy/refpolicy_2.20130424.inc | 4 +++ 2 files changed, 36 insertions(+) create mode 100644 recipes-security/refpolicy/refpolicy-2.20130424/Allow-ping-to-get-set-capabilities.patch -- 1.7.9.5 _______________________________________________ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto