Recent iputils in CentOS 8 Stream removed capabilities on the ping
binary and requires the change in net.ipv4.ping_group_range to allow
unprivileged users to ping, however the change in systemd[1] is not
yet shipped.
This is a temporal workaround and sets the kernel parameter. This can
be removed once the fix is shipped as part of a new systemd package.
Reviewed: https:/ /review. opendev. org/c/openstack /puppet- openstack- integration/ +/824695 /opendev. org/openstack/ puppet- openstack- integration/ commit/ 9598bebff8a1882 726b42468fb9994 a9155e2e47
Committed: https:/
Submitter: "Zuul (22348)"
Branch: stable/wallaby
commit 9598bebff8a1882 726b42468fb9994 a9155e2e47
Author: Takashi Kajinami <email address hidden>
Date: Fri Jan 14 18:33:47 2022 +0900
Fix unprivileged ping
Recent iputils in CentOS 8 Stream removed capabilities on the ping ping_group_ range to allow
binary and requires the change in net.ipv4.
unprivileged users to ping, however the change in systemd[1] is not
yet shipped.
This is a temporal workaround and sets the kernel parameter. This can
be removed once the fix is shipped as part of a new systemd package.
[1] https:/ /github. com/redhat- plumbers/ systemd- rhel8/pull/ 246
Closes-Bug: #1957913 3d983818fc8c8b9 d1e1cdebb31 d3ce15af0baf03a 878ef0b131) 61b0a3062c4bda0 806d31aead)
Change-Id: I6fc0e7a62106c5
(cherry picked from commit 50c2dab0634e33e
(cherry picked from commit 468b2263aa36636