diff --git a/iputils.changes b/iputils.changes index 9415122..6118300 100644 --- a/iputils.changes +++ b/iputils.changes @@ -1,3 +1,8 @@ +------------------------------------------------------------------- +Mon Oct 11 03:56:55 UTC 2010 - reddwarf@opensuse.org + +- Use POSIX capabilities instead of SUID for ping + ------------------------------------------------------------------- Tue Sep 7 20:35:03 UTC 2010 - aj@suse.de diff --git a/iputils.spec b/iputils.spec index 59624fd..ca3d9c9 100644 --- a/iputils.spec +++ b/iputils.spec @@ -100,8 +100,14 @@ rm -rf $RPM_BUILD_ROOT /sbin/arping /sbin/ifenslave /sbin/clockdiff +# Official rpm packages prior to 11.4 hadn't libcap support +%if 0%{?suse_version} <= 1130 %attr(4755,root,root) /bin/ping %attr(4755,root,root) /bin/ping6 +%else +%caps(cap_net_raw=ep) /bin/ping +%caps(cap_net_raw=ep) /bin/ping6 +%endif /bin/ipg /sbin/tracepath /sbin/tracepath6