Mailinglist Archive: opensuse-bugs (13066 mails)

[bugzilla_noreply@xxxxxxxxxx]

https://bugzilla.novell.com/show_bug.cgi?id=464698

User felix@xxxxxxxxxxxx added comment
https://bugzilla.novell.com/show_bug.cgi?id=464698#c1

           Summary: file_caps=1 parameter does not work
           Product: openSUSE 11.1
           Version: Final
          Platform: Other
        OS/Version: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
        AssignedTo: bnc-team-screening@xxxxxxxxxxxxxxxxxxxxxx
        ReportedBy: felix@xxxxxxxxxxxx
         QAContact: qa@xxxxxxx
                CC: agruen@xxxxxxxxxx
          Found By: ---


I am trying to use filesystem capabilities for ping (I know ping is dropping
privileges immediately but I want to play with it nevertheless)

It work with an openSUSE 11.1 kernel in November but it does not work anymore.

fm@macbook:~> uname -a
Linux macbook 2.6.27.7-9-default #1 SMP 2008-12-04 18:10:04 +0100 i686 i686
i386 GNU/Linux
fm@macbook:~> cat /proc/cmdline
file_caps=1 printk.time=true vga=0x317
fm@macbook:~> /sbin/getcap /bin/ping
/bin/ping = cap_net_raw+ep
fm@macbook:~> ping google.de
ping: icmp open socket: Operation not permitted
fm@macbook:~> ls -l /bin/ping
-rwxr-xr-x 1 root root 38984  3. Dez 06:07 /bin/ping

I installed an old 11.0 kernel to verify
fm@macbook:~> uname -a
Linux macbook 2.6.25.5-1.1-default #1 SMP 2008-06-07 01:55:22 +0200 i686 i686
i386 GNU/Linux
fm@macbook:~> ping google.de
PING google.de (72.14.221.104) 56(84) bytes of data.
64 bytes from fg-in-f104.google.com (72.14.221.104): icmp_seq=1 ttl=237
time=16.0 ms

I use the file_caps=1 parameter as described in kernel-parameters.txt


-- 
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.