Re: [opensuse] Friday quiz - ping: socket: Operation not permitted

Andrei Borzenkov wrote:

On Fri, Jun 1, 2018 at 2:40 PM, Per Jessen wrote:

...

On Leap15 as a plain user:

per@discompi2:~> ping discompi3 ping: socket: Operation not permitted

With an strace -

socket(AF_INET, SOCK_DGRAM, IPPROTO_ICMP) = -1 EACCES (Permission denied) socket(AF_INET, SOCK_RAW, IPPROTO_ICMP) = -1 EPERM (Operation not permitted) socket(AF_INET6, SOCK_DGRAM, IPPROTO_ICMPV6) = -1 EACCES (Permission denied) socket(AF_INET6, SOCK_RAW, IPPROTO_ICMPV6) = -1 EPERM (Operation not permitted)

Nothing to be seen in apparmor.

what "getcap /usr/bin/ping" says? You may need to install libcap-progs.

From one Leap15 test system (xen guest)

test150:~ # getcap /usr/bin/ping /usr/bin/ping = cap_net_raw+ep On the system where I see the problem: discompi2:~ # getcap /usr/bin/ping Failed to get capabilities of file `/usr/bin/ping' (Operation not supported) (root is on NFS if that matters). -- Per Jessen, Zürich (21.8°C) http://www.hostsuisse.com/ - virtual servers, made in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org