Andrei Borzenkov wrote:
On Fri, Jun 1, 2018 at 2:40 PM, Per Jessen <per@computer.org> wrote:
On Leap15 as a plain user:
per@discompi2:~> ping discompi3 ping: socket: Operation not permitted
With an strace -
socket(AF_INET, SOCK_DGRAM, IPPROTO_ICMP) = -1 EACCES (Permission denied) socket(AF_INET, SOCK_RAW, IPPROTO_ICMP) = -1 EPERM (Operation not permitted) socket(AF_INET6, SOCK_DGRAM, IPPROTO_ICMPV6) = -1 EACCES (Permission denied) socket(AF_INET6, SOCK_RAW, IPPROTO_ICMPV6) = -1 EPERM (Operation not permitted)
Nothing to be seen in apparmor.
what "getcap /usr/bin/ping" says? You may need to install libcap-progs.
From one Leap15 test system (xen guest)
test150:~ # getcap /usr/bin/ping /usr/bin/ping = cap_net_raw+ep On the system where I see the problem: discompi2:~ # getcap /usr/bin/ping Failed to get capabilities of file `/usr/bin/ping' (Operation not supported) (root is on NFS if that matters). -- Per Jessen, Zürich (21.8°C) http://www.hostsuisse.com/ - virtual servers, made in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org