#382 376 - Self-Contained Change: Enable net.ipv4.ping_group_range in the kernel
Merged 4 years ago by pbokoc. Opened 4 years ago by quiet.
Unknown source iss376  into  f31

@@ -3,3 +3,10 @@

  

  [[sect-kernel]]

  = Kernel

+ 

+ [[ping-group-range]]

+ == Enable net.ipv4.ping_group_range

+ 

+ Fedora 31 now supports the `net.ipv4.ping_group_range` kernel parameter for all user groups. This change enables all users to create Internet Control Message Protocol (ICMP) Echo sockets without using the `setuid` binaries, or having the `CAP_NET_ADMIN` and `CAP_NET_RAW` file capabilities.

+ 

+ As a result, the rootless `podman` containers are now able to use the `ping` utility. This change applies also to users developing on the *Fedora Silverblue* variant, who use containers created through the `toolbox` utility. 

\ No newline at end of file

There's probably an extra the in create the Internet Control Message.

+1, looks good to me.

Thank you for working on the release notes.

1 new commit added

  • Applies SME feedback
4 years ago

Pull-Request has been merged by pbokoc

4 years ago
Metadata