Some more info on this bug:

 * In >=Focal ping6 is a symlink to ping, so ping may fail
   in the same way.

 * ping gets the "raw socket" permissions it needs via a
   capability:

   $ getcap /usr/bin/ping
   /usr/bin/ping cap_net_raw=ep

   No need for suid bits.

 * I downloaded ubuntu-20.04-server-cloudimg-armhf.img from [1],
   mounted it with using qemu-nbd and verified that ping has the
   right capability: it does. However I'm not 100% sure that's
   the image used to deploy the autopkgtest testbed systems.

 * ping doesn't even need that one, provided that the GID
   running ping is in this range:

   sysctl net.ipv4.ping_group_range
   net.ipv4.ping_group_range = 0        2147483647

   Note: this also affects IPv6.

[1] https://cloud-images.ubuntu.com/releases/focal/release/

** Also affects: backuppc (Ubuntu Hirsute)
   Importance: Undecided
       Status: New

** Also affects: backuppc (Ubuntu Focal)
   Importance: Undecided
       Status: New

** Changed in: backuppc (Ubuntu Focal)
       Status: New => Confirmed

** Changed in: backuppc (Ubuntu Hirsute)
       Status: New => Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1936437

Title:
  Backuppc autopkgtest fails doing ping6 due to 'Operation not
  permitted'

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/backuppc/+bug/1936437/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to