After running,
$ ls -l /bin/ping
-rwsr-xr-x 1 root root 34740 Nov 5 2012 /bin/ping
I wonder, why doesn't Ubuntu use capabilities (i.e. raw sockets) rather than setuid?
Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems. It only takes a minute to sign up.
Sign up to join this communityAfter running,
$ ls -l /bin/ping
-rwsr-xr-x 1 root root 34740 Nov 5 2012 /bin/ping
I wonder, why doesn't Ubuntu use capabilities (i.e. raw sockets) rather than setuid?
It is considered a bug if a package has overly permissive capabilities, so these cases should be reported. However, they might have already fixed it according to https://bugs.launchpad.net/ubuntu/+source/iputils/+bug/534341