Vasiliy Kulikov <segoon@xxxxxxxxxxxx> writes: > This patch adds IPPROTO_ICMP socket kind. It makes it possible to send > ICMP_ECHO messages and receive the corresponding ICMP_ECHOREPLY messages > without any special privileges. In other words, the patch makes it > possible to implement setuid-less and CAP_NET_RAW-less /bin/ping. In > order not to increase the kernel's attack surface, the new functionality > is disabled by default, but is enabled at bootup by supporting Linux > distributions, optionally with restriction to a group or a group range > (see below). You'll need to do a manpage patch too. Otherwise noone will know how to use it. -Andi -- ak@xxxxxxxxxxxxxxx -- Speaking for myself only -- To unsubscribe from this list: send the line "unsubscribe linux-man" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
