On 01/26/2017 11:40 AM, Michael Olbrich wrote: > On Wed, Jan 25, 2017 at 07:41:42AM +0100, Uwe Kleine-König wrote: >> On Wed, Jan 25, 2017 at 12:13:59AM +0100, Clemens Gruber wrote: >>> The current version of iputils ping can handle IPv4 and IPv6 but >>> requires a crypto library dependency for ICMPv6 NI queries. >>> Add all possible choices: libgcrypt, nettle, openssl or none >>> >>> tracepath works with IPv4 as well as IPv6 and it does not have to run as >>> root. >>> traceroute6 only works with IPv6 and requires superuser privileges. >> >> on Debian traceroute6.iputils isn't setuid root and works for me. It has >> caps set however: >> >> $ ls -l /usr/bin/traceroute6.iputils >> -rwxr-xr-x 1 root root 18936 Nov 10 07:23 /usr/bin/traceroute6.iputils >> >> $ /sbin/getcap /usr/bin/traceroute6.iputils >> /usr/bin/traceroute6.iputils = cap_net_raw+ep >> >> Would that work here, too? > > In theory yes, but I think our image generation tools cannot handle this.
mk2fs from e2fsprogs can generate images with extended attributed. I used it to build imagea with ima/evm attributes. Marc -- Pengutronix e.K. | Marc Kleine-Budde | Industrial Linux Solutions | Phone: +49-231-2826-924 | Vertretung West/Dortmund | Fax: +49-5121-206917-5555 | Amtsgericht Hildesheim, HRA 2686 | http://www.pengutronix.de |
signature.asc
Description: OpenPGP digital signature
_______________________________________________ ptxdist mailing list ptxdist@pengutronix.de
