http://bugzilla.suse.com/show_bug.cgi?id=1140994 http://bugzilla.suse.com/show_bug.cgi?id=1140994#c1 Matthias Gerstner changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |matthias.gerstner@suse.com Summary|iputils: Add permissions |AUDIT-0: iputils: |for arping and clockdiff |cap_net_raw=p capability | |for arping and clockdiff --- Comment #1 from Matthias Gerstner --- Do you have some added context on why these capabilities are necessary now? Have the tools only been available to root until now? A quick test seems to suggest just that. Adding new privileges will need a code review, however. I'm changing this bug into an AUDIT bug and a member of the security team will look into it. -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1140994 http://bugzilla.suse.com/show_bug.cgi?id=1140994#c3 --- Comment #3 from Petr Vorel --- Thanks for an input. I'll remove (In reply to Matthias Gerstner from comment #1)

Do you have some added context on why these capabilities are necessary now? Have the tools only been available to root until now? A quick test seems to suggest just that. Yes.

Adding new privileges will need a code review, however. I'm changing this bug into an AUDIT bug and a member of the security team will look into it.

OK, I'll remove this from https://github.com/openSUSE/permissions/pull/24 and create new one for it. -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1140994 http://bugzilla.suse.com/show_bug.cgi?id=1140994#c5 Malte Kraus changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CONFIRMED Assignee|security-team@suse.de |malte.kraus@suse.com Summary|AUDIT-0: iputils: |AUDIT-0: iputils: |cap_net_raw=p capability |cap_net_raw=p capability |for arping and clockdiff |for clockdiff --- Comment #5 from Malte Kraus --- I'll have a look. -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1140994 http://bugzilla.suse.com/show_bug.cgi?id=1140994#c7 --- Comment #7 from Swamp Workflow Management --- This is an autogenerated message for OBS integration: This bug (1140994) was mentioned in https://build.opensuse.org/request/show/714806 Factory / permissions -- You are receiving this mail because: You are on the CC list for the bug.