From e7fa981b7038cca5df8c1e57a3d21f3745bd2697 Mon Sep 17 00:00:00 2001 From: Stephen Hemminger Date: Wed, 16 Jun 2010 10:43:45 -0700 Subject: Remove capability from ping Ping is already setuid root. --- sysconf/filecaps | 2 -- 1 file changed, 2 deletions(-) (limited to 'sysconf') diff --git a/sysconf/filecaps b/sysconf/filecaps index 80730334..c1d0ec1d 100644 --- a/sysconf/filecaps +++ b/sysconf/filecaps @@ -14,8 +14,6 @@ cap_net_admin=pe /usr/sbin/brctl # Raw sockets cap_net_raw=pe /usr/bin/tshark cap_net_raw=pe /usr/sbin/tcpdump -cap_net_raw=pe /bin/ping -cap_net_raw=pe /bin/ping6 # Special case to allow command login cap_audit_write=pe /bin/vbash -- cgit v1.2.3