fping6 should be able to use raw sockets as non-root
fping6 needs to be able to use raw sockets, which is by default not allowed as non-root user.
The readme recommends: setcap cap_net_raw+ep /usr/local/bin/fping*
(from redmine: issue id 3000, created on 2014-06-05, closed on 2014-06-25)
- Changesets:
- Revision 10be6429 by Natanael Copa on 2014-06-19T08:16:59Z:
main/fping: fix fping6 for non-root users
fixes #3000
- Revision f5a54917 by Natanael Copa on 2014-06-19T09:28:33Z:
main/fping: fix fping6 for non-root users
fixes #3000
(cherry picked from commit 10be6429c9aaafb568e1158310287a7b814613db)
Conflicts:
main/fping/APKBUILD
- Revision 51c9c500 by Natanael Copa on 2015-02-02T14:17:16Z:
main/fping: enable suid root for fping6
It should be possible to make ping work as normal user with recent
linux: https://lkml.org/lkml/2011/5/13/382
However, it appears that it requires relatively intrusive changes in the
ping utility. Its not just opening the socket as SOCK_DGRAM and think
everything is ok (like it appears to work on OSX)
Busybox tried to add support for it:
http://git.busybox.net/busybox/commit/networking/ping.c?id=72745632a13ccd12232127b31e1656f2f7ebcaff
But later reverted it:
http://git.busybox.net/busybox/commit/networking/ping.c?id=f0058b1b1fe9f7e69b415616096fb9347f599426
The patch for the normal ping utility is also relatively intrusive:
http://openwall.info/wiki/_media/segoon/iputils-ss020927-pingsock.diff
I could also not find anything that indicates that this works for ipv6
in kernel. There are no /proc/sys/net/ipv6/ping_group_range
So it looks like we need to set suid root for now.
ref #3000
(cherry picked from commit d37ee34b7691ca0e2d59f39ec2dbc9484105c087)