Source: iputils Version: 3:20121221-5 Severity: normal Hello!
The new version of iputils in Jessie uses capabilities instead of set-uid to gain the necessary priviliges to send ICMP requests. While this is a great improvement with regards to security, it currently may lead to rendering the ping and arping commands unusable for non-root users. This happens because the necessary package, libcap2-bin, which is required to properly configure the iputils package to use capabilities is currently set as Recommends in debian/control rather than a Depends. However, in many cases such as when using debootstrap (which is also used by FAI, for example), 'apt-get install' is run using the --no-install-recommends option which means the 'ping' command is installed such that it can be used by root only. In order to fix this, one has to manually install the libcap2-bin package and re-run 'dpkg-reconfigure iputils-ping' command, for example. Just adding the libcap2-bin package to the list of packages for debootstrap does not fix the problem. Thus, in order to avoid problems in environments where 'apt-get install' is run with the '--no-install-recommends' option, I would like you to ask to add libcap2-bin to Depends rather than Recommends in debian/control. Thanks, Adrian -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
