Package: fping Version: 3.10-2 Severity: important Previous versions of fping appear to be suid root, -rwsr-xr-x, but now it appears to attempt to set capabilities, and if that fails because the filesystem (such as nfsroot) doesn't support cababilities, well, then, too bad:
> sudo aptitude reinstall fping The following packages will be REINSTALLED: fping 0 packages upgraded, 0 newly installed, 1 reinstalled, 0 to remove and 79 not upgraded. Need to get 0 B/35.2 kB of archives. After unpacking 0 B will be used. (Reading database ... 124849 files and directories currently installed.) Preparing to unpack .../fping_3.10-2_armhf.deb ... Unpacking fping (3.10-2) over (3.10-2) ... Processing triggers for man-db (2.7.0.2-5) ... Setting up fping (3.10-2) ... Failed to set capabilities on file `/usr/bin/fping' (Invalid argument) The value of the capability argument is not permitted for a file. Or the file is not a regular (non-symlink) file WARNING: 'setcap cap_net_raw+ep /usr/bin/fping' failed. You may want to call 'dpkg-statoverride --update --add root root 4755 /usr/bin/fping' to make it setuid. Failed to set capabilities on file `/usr/bin/fping6' (Invalid argument) The value of the capability argument is not permitted for a file. Or the file is not a regular (non-symlink) file WARNING: 'setcap cap_net_raw+ep /usr/bin/fping6' failed. You may want to call 'dpkg-statoverride --update --add root root 4755 /usr/bin/fping6' to make it setuid. > l /usr/bin/fping -rwxr-xr-x 1 root root 30460 Aug 13 2014 /usr/bin/fping > fping -c 1 -t 1000 dirac (null): can't create socket (must run as root?) : Permission denied How about setting that stat override automatically in case of failure, instead of breaking the system? -- Package-specific info: -- System Information: Distributor ID: Raspbian Description: Raspbian GNU/Linux 8.0 (jessie) Release: 8.0 Codename: jessie Architecture: armv6l Kernel: Linux 3.18.7+ (PREEMPT) Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages fping depends on: ii libc6 2.19-18+deb8u1 ii libcap2-bin 1:2.24-8 fping recommends no packages. fping suggests no packages. -- no debconf information
