diff options
| author | Mike Gilbert <floppym@gentoo.org> | 2026-02-05 16:08:14 -0500 |
|---|---|---|
| committer | Mike Gilbert <floppym@gentoo.org> | 2026-02-05 16:18:02 -0500 |
| commit | 3ea5bb0c62bc9d8073192273fa311f60c4503c99 (patch) | |
| tree | 0d43173651361dea9501f3f14e8588cca264ffc7 /dev-python/python-tests/python-tests-3.14.2.ebuild | |
| parent | e3a8d6d0b607c12b212cb447b7c6e9447dd923c0 (diff) | |
| download | gentoo-3ea5bb0c62bc9d8073192273fa311f60c4503c99.tar.gz gentoo-3ea5bb0c62bc9d8073192273fa311f60c4503c99.tar.bz2 gentoo-3ea5bb0c62bc9d8073192273fa311f60c4503c99.zip | |
net-misc/iputils: rework filecaps support
iputils uses libcap to enable/disable caps at run time. When libcap
is disabled, iputils calls seteuid() to elevate/drop privs.
For best results, we should require libcap (USE=caps) whenever filecaps
are enabled to ensure permissions can be dropped when appropriate.
Note that the ping command does not always require CAP_NET_RAW since
we enabled the net.ipv4.ping_group_range sysctl setting. However, the -m
option still requires CAP_NET_RAW or CAP_NET_ADMIN depending on the
kernel version.
Bug: https://bugs.gentoo.org/962112
Signed-off-by: Mike Gilbert <floppym@gentoo.org>
Diffstat (limited to 'dev-python/python-tests/python-tests-3.14.2.ebuild')
0 files changed, 0 insertions, 0 deletions