[Bug 728312] New: ping: icmp open socket: Operation not permitted - lack of suid bit on /bin/ping
https://bugzilla.novell.com/show_bug.cgi?id=728312 https://bugzilla.novell.com/show_bug.cgi?id=728312#c0 Summary: ping: icmp open socket: Operation not permitted - lack of suid bit on /bin/ping Classification: openSUSE Product: openSUSE 12.1 Version: RC 2 Platform: Other OS/Version: Other Status: NEW Severity: Major Priority: P5 - None Component: Network AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: highwaystar.ru@gmail.com QAContact: qa@suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:5.0) Gecko/20100101 Firefox/5.0 When I try to ping something in openSUSE 12.1 RC2 i686 LiveCD I get this message "ping: icmp open socket: Operation not permitted" Reproducible: Always Steps to Reproduce: 1. Boot KDE or GNOME LiveCD 2. open terminal as user 3. run ping 127.0.0.1 Actual Results: You will get message "ping: icmp open socket: Operation not permitted"" Expected Results: ping should work under unprevileged user This message appears because of lack suid bit on /bin/ping linux@linux:~> ls -la /bin/ping -rwxr-xr-x 1 root root 38956 окт. 29 06:57 /bin/ping -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=728312 https://bugzilla.novell.com/show_bug.cgi?id=728312#c1 Andreas Jaeger <aj@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|bnc-team-screening@forge.pr |coolo@suse.com |ovo.novell.com | --- Comment #1 from Andreas Jaeger <aj@suse.com> 2011-11-04 13:37:17 UTC --- Coolo, livecd bug? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=728312 https://bugzilla.novell.com/show_bug.cgi?id=728312#c2 Stephan Kulow <coolo@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|coolo@suse.com |ms@suse.com --- Comment #2 from Stephan Kulow <coolo@suse.com> 2011-11-07 10:20:44 CET --- kiwi/tar problem. All file capabilities (fscaps) are set nicely in the chroot (same as with file attr and file acls), but kiwi transfers the files from chroot into the appliance filesystem using tar - and tar does not transfer either of these options. I'm actually suprised tar does not do it, but we verified it on a 12.1 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=728312 https://bugzilla.novell.com/show_bug.cgi?id=728312#c3 Stephan Kulow <coolo@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |lnussel@suse.com --- Comment #3 from Stephan Kulow <coolo@suse.com> 2011-11-07 10:28:03 CET --- Just found, fedora has a _HUGE_ patch for tar to add xattr and acls, but still no fscaps: http://pkgs.fedoraproject.org/gitweb/?p=tar.git;a=tree In summary: fscaps are big NOGO if you want to backup your system. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=728312 https://bugzilla.novell.com/show_bug.cgi?id=728312#c4 Marcus Schaefer <ms@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED --- Comment #4 from Marcus Schaefer <ms@suse.com> 2011-11-07 09:38:24 UTC --- Hmm, I should use rsync then -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=728312 https://bugzilla.novell.com/show_bug.cgi?id=728312#c5 --- Comment #5 from Bernhard Wiedemann <bwiedemann@suse.com> 2011-11-07 11:00:20 CET --- This is an autogenerated message for OBS integration: This bug (728312) was mentioned in https://build.opensuse.org/request/show/90216 Factory / permissions -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=728312 https://bugzilla.novell.com/show_bug.cgi?id=728312#c6 Marcus Schaefer <ms@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Resolution| |FIXED --- Comment #6 from Marcus Schaefer <ms@suse.com> 2011-11-07 11:31:19 UTC --- fixed -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=728312 https://bugzilla.novell.com/show_bug.cgi?id=728312#c Swamp Workflow Management <swamp@suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status Whiteboard| |maint:running:48598:low -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=728312 https://bugzilla.novell.com/show_bug.cgi?id=728312#c Swamp Workflow Management <swamp@suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status Whiteboard|maint:running:48598:low |. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=728312 https://bugzilla.novell.com/show_bug.cgi?id=728312#c Swamp Workflow Management <swamp@suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status Whiteboard|. |maint:running:48598:low -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=728312 https://bugzilla.novell.com/show_bug.cgi?id=728312#c7 Swamp Workflow Management <swamp@suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status Whiteboard|maint:running:48598:low |maint:running:48598:low | |maint:released:sle11-sp1-at | |k12:50822 --- Comment #7 from Swamp Workflow Management <swamp@suse.de> 2013-01-29 15:52:11 UTC --- Update released for: kiwi4, kiwi4-debuginfo, kiwi4-debugsource, kiwi4-desc-isoboot, kiwi4-desc-netboot, kiwi4-desc-oemboot, kiwi4-desc-vmxboot, kiwi4-doc, kiwi4-instsource, kiwi4-pxeboot, kiwi4-templates, kiwi4-tools, susestudio, susestudio-clicfs, susestudio-common, susestudio-debuginfo, susestudio-debugsource, susestudio-image-helpers, susestudio-image-helpers-debuginfo, susestudio-image-helpers-debugsource, susestudio-parted, susestudio-rmds, susestudio-runner, susestudio-squashfs, susestudio-thoth, susestudio-ui-server Products: SLE-STUDIOONSITE 1.2 (x86_64) SLE-STUDIOONSITERUNNER 1.2 (s390x) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=728312 https://bugzilla.novell.com/show_bug.cgi?id=728312#c8 Bart Van Assche <bart@bartvanassche.be> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED CC| |bart@bartvanassche.be Resolution|FIXED | --- Comment #8 from Bart Van Assche <bart@bartvanassche.be> 2014-01-13 09:38:07 UTC --- Happens again with openSUSE 13.1: $ ping localhost ping: icmp open socket: Operation not permitted $ type ping ping is hashed (/usr/bin/ping) $ ls -l /usr/bin/ping -rwxr-xr-x 1 root root 43480 Nov 15 23:47 /usr/bin/ping $ rpm -qf /usr/bin/ping iputils-s20101006-23.4.1.x86_64 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=728312 https://bugzilla.novell.com/show_bug.cgi?id=728312#c9 Luigi baldoni <aloisio@gmx.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |aloisio@gmx.com Component|Network |Network Version|RC 2 |Final AssignedTo|ms@suse.com |bnc-team-screening@forge.pr | |ovo.novell.com Product|openSUSE 12.1 |openSUSE 13.1 --- Comment #9 from Luigi baldoni <aloisio@gmx.com> 2014-02-07 13:47:31 UTC --- Same for me on 13.1. What's causing this, exactly? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=728312 https://bugzilla.novell.com/show_bug.cgi?id=728312#c zhang jiajun <jzhang@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jzhang@suse.com AssignedTo|bnc-team-screening@forge.pr |ms@suse.com |ovo.novell.com | -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=728312 https://bugzilla.novell.com/show_bug.cgi?id=728312#c10 Bernhard Wiedemann <bwiedemann@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |bwiedemann@suse.com AssignedTo|ms@suse.com |lnussel@suse.com --- Comment #10 from Bernhard Wiedemann <bwiedemann@suse.com> 2014-09-14 21:34:16 CEST --- I had a fresh install from openSUSE-Factory-KDE-Live-x86_64-Snapshot20140909-Media.iso today and had to do chkstat --set --fscaps /etc/permissions.easy to get ping working as a normal user. Can't this be part of some post-scripts? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠novell.com