You are not logged in.

#1 2020-10-01 09:13:08

kokoko3k
Member
Registered: 2008-11-14
Posts: 2,390

[SOLVED] no CAPS ping -> user is unable to ping after update iputils

Good morning,

After today's update, it seems i'm unable to ping without root privileges:

koko@Gozer# pacman -Q iputils
iputils 20200821-1

koko@Gozer# ping 1.1.1.1
ping: socket: Operation not permitted

koko@Gozer# getcap /usr/bin/ping

#


Going back to the previous installed iputils package, ping works:

koko@Gozer# pacman -Q iputils
iputils 20190709-2

koko@Gozer# getcap /usr/bin/ping
/usr/bin/ping cap_net_raw=ep

koko@Gozer# ping 1.1.1.1
PING 1.1.1.1 (1.1.1.1) 56(84) bytes of data.
64 bytes from 1.1.1.1: icmp_seq=1 ttl=58 time=3.71 ms

I'm a bit lost, is the change intentional and what is the right way to give user the ability to ping again?

Thanks!

Last edited by kokoko3k (2020-10-01 11:47:21)


Help me to improve ssh-rdp !
Retroarch User? Try my koko-aio shader !

Offline

#2 2020-10-01 10:27:42

Lone_Wolf
Member
From: Netherlands, Europe
Registered: 2005-10-04
Posts: 11,868

Re: [SOLVED] no CAPS ping -> user is unable to ping after update iputils

iputils 20200821-1 is in repos since september 10 .
The last version before that was 20190709-3 , not -2 .

That suggests your "today's update" was the first in some time. please post the pacman log from today's update.


Disliking systemd intensely, but not satisfied with alternatives so focusing on taming systemd.


(A works at time B)  && (time C > time B ) ≠  (A works at time C)

Offline

#3 2020-10-01 10:38:44

kokoko3k
Member
Registered: 2008-11-14
Posts: 2,390

Re: [SOLVED] no CAPS ping -> user is unable to ping after update iputils

Indeed, i am back to work since months.
Anyway, since reverting to my previous one "solved" the issue, i think the issue lies in the package itself.
Are you able to ping as a normal user?
This is the complete log:
https://0x0.st/iUn0.log

Thanks.


Help me to improve ssh-rdp !
Retroarch User? Try my koko-aio shader !

Offline

#4 2020-10-01 10:54:07

seth
Member
Registered: 2012-09-03
Posts: 49,951

Offline

#5 2020-10-01 11:37:58

kokoko3k
Member
Registered: 2008-11-14
Posts: 2,390

Re: [SOLVED] no CAPS ping -> user is unable to ping after update iputils

Thanks seth, so, as i understood:
* mainline iputils dropped the required CAPS from ping executable
* ...so it is not a bug
* one is supposed to use net.ipv4.ping_group_range instead.

Is it right?

--Mmhh--
EDIT:
I think i understood what happened:

koko@Gozer# ls -la /etc/sysctl.d/50-default.conf 
-rw-r--r-- 1 root root 741 mar  7  2016 /etc/sysctl.d/50-default.conf

koko@Gozer# ls -la /usr/lib/sysctl.d/50-default.conf 
-rw-r--r-- 1 root root 1939 ott  1 13:25 /usr/lib/sysctl.d/50-default.conf

root@Gozer# grep net.ipv4.ping_group_range /etc/sysctl.d/50-default.conf 

root@Gozer# grep net.ipv4.ping_group_range /usr/lib/sysctl.d/50-default.conf
-net.ipv4.ping_group_range = 0 2147483647

/usr/lib/sysctl.d/50-default.conf is ignored because /etc/sysctl.d/50-default.conf exists on my system. (since 2016!!)
man sysctl.conf explicitely states:

       --system
              Load  settings from all system configuration files. Files are read from directories in the following list in given order from top to bottom.  Once a file of a given filename is loaded, any file of the same name in sub‐
              sequent directories is ignored.
              /run/sysctl.d/*.conf
              /etc/sysctl.d/*.conf
              /usr/local/lib/sysctl.d/*.conf
              /usr/lib/sysctl.d/*.conf
              /lib/sysctl.d/*.conf
              /etc/sysctl.conf

so i fixed by issuing:

# mv /etc/sysctl.d/50-default.conf /etc/sysctl.d/50-koko-default.conf
# sysctl --system

Thank you all!

Last edited by kokoko3k (2020-10-01 11:53:41)


Help me to improve ssh-rdp !
Retroarch User? Try my koko-aio shader !

Offline

#6 2020-10-01 11:44:42

seth
Member
Registered: 2012-09-03
Posts: 49,951

Re: [SOLVED] no CAPS ping -> user is unable to ping after update iputils

Yes.
Did you figure the rest of your original post?

Offline

#7 2020-10-01 11:46:25

kokoko3k
Member
Registered: 2008-11-14
Posts: 2,390

Re: [SOLVED] no CAPS ping -> user is unable to ping after update iputils

Yep, edited my message just now :-)


Help me to improve ssh-rdp !
Retroarch User? Try my koko-aio shader !

Offline

Board footer

Powered by FluxBB