1
0
Fork 1
mirror of https://github.com/NixOS/nixpkgs.git synced 2024-11-18 19:51:17 +00:00
nixpkgs/nixos/doc/manual/development
Lin Jian 759ec1113d
nixos/network-interfaces: stop wrapping ping with cap_net_raw
From systemd 243 release note[1]:

This release enables unprivileged programs (i.e. requiring neither
setuid nor file capabilities) to send ICMP Echo (i.e. ping) requests
by turning on the "net.ipv4.ping_group_range" sysctl of the Linux
kernel for the whole UNIX group range, i.e. all processes.

So this wrapper is not needed any more.

See also [2] and [3].

This patch also removes:
- apparmor profiles in NixOS for ping itself and the wrapped one
- other references for the wrapped ping

[1]: 8e2d9d40b3/NEWS (L6457-L6464)
[2]: https://github.com/systemd/systemd/pull/13141
[3]: https://fedoraproject.org/wiki/Changes/EnableSysctlPingGroupRange
2023-09-21 16:52:16 +08:00
..
activation-script.section.md nixos/network-interfaces: stop wrapping ping with cap_net_raw 2023-09-21 16:52:16 +08:00
assertions.section.md
bootspec.chapter.md
building-parts.chapter.md
developing-the-test-driver.chapter.md
development.md
freeform-modules.section.md nixos-render-docs: add examples support 2023-05-03 19:58:21 +02:00
importing-modules.section.md
linking-nixos-tests-to-packages.section.md
meta-attributes.section.md
nixos-tests.chapter.md
option-declarations.section.md nixos-render-docs: add examples support 2023-05-03 19:58:21 +02:00
option-def.section.md
option-types.section.md lib/types: add pathInStore 2023-06-27 11:48:08 +02:00
replace-modules.section.md
running-nixos-tests-interactively.section.md
running-nixos-tests.section.md
settings-options.section.md nixos-render-docs: add examples support 2023-05-03 19:58:21 +02:00
sources.chapter.md
testing-installer.chapter.md
unit-handling.section.md nixos/stc: Improve mount unit handling 2023-08-21 09:07:14 +02:00
what-happens-during-a-system-switch.chapter.md
writing-documentation.chapter.md
writing-modules.chapter.md nixos-render-docs: add examples support 2023-05-03 19:58:21 +02:00
writing-nixos-tests.section.md integration test driver: Auto-generate integration test driver's machine 2023-07-10 08:51:52 +02:00