Capabilities Beispiel ping

Download

• cd /usr/local/bin
• wget https://xinux.de/downloads/ping-orig
• chmod +x ping-orig

Test

als normaler Benutzer

• su - xinux
• ping-orig 1.1.1.1

ping-orig: socktype: SOCK_RAW
ping-orig: socket: Operation not permitted
ping-orig: => missing cap_net_raw+p capability or setuid?

Lösung per Capabilities

• sudo setcap cap_net_raw+p /usr/local/bin/ping-orig
• sudo getcap /usr/local/bin/ping-orig

/usr/local/bin/ping-orig cap_net_raw=p

• ping-orig 1.1.1.1

PING 1.1.1.1 (1.1.1.1) 56(84) bytes of data.
64 bytes from 1.1.1.1: icmp_seq=1 ttl=56 time=4.86 ms

Links

• http://unixetc.co.uk/2016/05/30/linux-capabilities-and-ping/